Vulnerability · Published Nov 4, 2025 · Assigned by Absolute
CVE-2025-59595
High 8.2
In plain English
A high-severity improper input validation in Secure Access from Absolute. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 32% of all known vulnerabilities).
Severity (CVSS 4.0)8.2High
Exploit odds (30 days)0.4%top 68.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12. An attacker can send a specially crafted packet to a server in a non-default configuration and cause the server to crash.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Absolute | Secure Access | 0 – before 14.12 |
Weakness: CWE-20 · Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N