Absolute Security Secure Access

• CVE-2026-116769 Critical 9.3 Authentication bypass in Secure Access Servers 0.4%
• CVE-2026-97718 Critical 9.4 CSRF in Secure Access Server v14.60 0.4%
• CVE-2026-97717 Medium 6.0 Denial of Service in Absolute Secure Access 0.2%
• CVE-2026-97716 High 8.7 Denial of Service in Absolute Secure Access 0.3%
• CVE-2026-97715 High 7.1 Denial of Service in Absolute Secure Access 0.2%
• CVE-2026-97714 High 8.2 Denial of service vulnerability in Secure Access 0.3%
• CVE-2026-55402 High 8.7 CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send specially crafted data to a server causing 0.4%
• CVE-2026-55401 Medium 6.9 CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server wi 0.4%
• CVE-2026-55400 Medium 6.0 CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default config 0.4%
• CVE-2026-55399 Medium 5.1 Resource exhaustion vulnerability in the Secure Access publisher 0.4%
• CVE-2026-55398 Medium 6.9 Memory management vulnerability in Secure Access clients 0.4%
• CVE-2026-33445 High 8.7 Memory management vulnerability in Secure Access servers 0.4%
• CVE-2026-33443 High 7.1 Memory management error in Secure Access servers prior to 14.55 0.4%
• CVE-2026-40958 Low 2.3 Input validation error in Secure Access clients prior to 14.55 0.4%
• CVE-2026-40957 Medium 6.1 Frameable content vulnerability in the Secure Access server login page 0.4%
• CVE-2026-40956 Low 2.1 Memory disclosure in Secure Access Clients 0.3%
• CVE-2026-40955 Low 2.1 Integer underflow vulnerability in Secure Access clients 0.3%
• CVE-2026-40954 Low 2.1 Integer underflow in Secure Access clients prior to 14.55 0.3%
• CVE-2026-40953 Medium 6.7 Heap overflow in Secure Access clients <0.1%
• CVE-2026-40952 High 8.5 Privilge misconfiguration in Secure Access installers 0.1%
• CVE-2026-0519 Medium 4.6 Information Disclosure in Secure Access Between 12.70 and 14.20 0.1%
• CVE-2026-0518 Medium 4.8 XSS in Secure Access Consoles prior to 14.20 0.2%
• CVE-2026-0517 Medium 6.0 Denial of Service in Secure Access Servers Prior to 14.20. 0.3%
• CVE-2025-59596 Medium 6.0 CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local networking policy is active, attackers on an 0.2%
• CVE-2025-54089 Medium 4.6 Cross-site Scripting vulnerability in Secure Access prior to 14.10 0.2%
• CVE-2025-54088 Medium 5.5 Open Redirect in Secure Access prior to 14.10 0.2%
• CVE-2025-54087 Low 1.8 Server-side request forgery in Secure Access 0.2%
• CVE-2025-54086 Medium 5.3 Excess Permissions in Warehouse 0.2%
• CVE-2025-49082 Medium 5.1 Permissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 0.3%
• CVE-2025-54085 Medium 5.1 Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 0.2%
• CVE-2025-49083 High 7.0 Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 0.4%
• CVE-2025-49081 Medium 6.9 Input validation vulnerability in the Secure Access prior to version 13.55 0.5%
• CVE-2025-49080 High 8.7 Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54 0.4%
• CVE-2025-27706 Medium 4.6 Cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54 0.3%
• CVE-2025-27703 High 7.0 Privilege escalation in the management console of Absolute Secure Access prior to version 13.54 0.3%
• CVE-2025-27702 Medium 6.9 Permissions bypass in the management console of Absolute Secure Access prior to version 13.54 0.3%
• CVE-2025-27705 Medium 5.5 There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfer 0.3%
• CVE-2025-27704 Medium 5.5 There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfer 0.3%
• CVE-2024-40873 Medium 4.5 XSS in Secure Access administrative console 0.3%
• CVE-2024-40872 High 8.4 Elevation of privilege in Absolute Secure Access clients and servers 0.2%