Vulnerability · Published Jan 17, 2026 · Assigned by Absolute
CVE-2026-0519Information Disclosure in Secure Access Between 12.70 and 14.20
Medium 4.6
In plain English
A medium-severity sensitive data in logs in Secure Access from Absolute Security. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities).
Severity (CVSS 4.0)4.6Medium
Exploit odds (30 days)0.1%top 97.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Absolute Security | Secure Access | 12.70 – before 14.20 |
Weakness: CWE-532 · Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N