Priority MEDIUM 46
CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to 14.61.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00408 · Published 2026-11-02 · Fixed in 14.61 CWE-287
Priority MEDIUM 44
CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00344 · Published 2026-10-07 · Fixed in 14.60 CWE-400
Priority MEDIUM 44
CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-07-15 · Fixed in 14.55 CWE-400
Priority MEDIUM 42
CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server.
CVSS 4.0CRITICAL 9.4· Network · No auth · User interaction · EPSS 0.00191 · Published 2026-11-02 · No fix listed CWE-352
Priority MEDIUM 40
An issue was discovered in Absolute Software CTES Windows Agent through 1.0.0.1479.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00861 · Published 2018-09-08 · No fix listed CWE-732
Priority LOW 38
CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-08-13 · Fixed in 14.57 CWE-125
Priority LOW 38
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00137 · Published 2026-07-15 · Fixed in 14.55 CWE-276
Priority LOW 38
CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50.
CVSS 4.0HIGH 8.5· Local · Low privileges · No interaction · EPSS 0.00104 · Published 2026-04-30 · Fixed in 14.50 CWE-125
Priority LOW 38
There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.0037 · Published 2025-06-12 · Fixed in 13.54 CWE-762
Priority LOW 37
CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00402 · Published 2026-08-13 · Fixed in 14.57 CWE-476
Priority LOW 37
CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00249 · Published 2026-04-30 · Fixed in 14.50 CWE-121
Priority LOW 37
There is an elevation of privilege vulnerability in server and client components of Absolute Secure Access prior to version 13.07.
CVSS 3.1HIGH 8.4· Local · Low privileges · No interaction · EPSS 0.00156 · Published 2024-07-25 · Fixed in 13.07 CWE-822
Priority LOW 36
CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00354 · Published 2026-07-15 · Fixed in 14.55 CWE-119
Priority LOW 36
CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00354 · Published 2026-07-15 · Fixed in 14.55 CWE-119
Priority LOW 36
CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00374 · Published 2025-11-04 · Fixed in 14.12 CWE-20
Priority LOW 35
CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61.
CVSS 4.0HIGH 8.3· Network · Low privileges · No interaction · EPSS 0.00226 · Published 2026-11-02 · Fixed in 14.61 CWE-20
Priority LOW 35
CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00252 · Published 2026-10-07 · Fixed in 14.60 CWE-400
Priority LOW 32
A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated.
CVSS 4.0MEDIUM 6.9· Physical · Low privileges · No interaction · EPSS 0.00183 · Published 2025-05-13 · Fixed in 2.8 CWE-284
Priority LOW 31
CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00294 · Published 2026-11-02 · Fixed in 14.61 CWE-20
Priority LOW 31
CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00226 · Published 2026-11-02 · Fixed in 14.61 CWE-20
Priority LOW 31
CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00226 · Published 2026-10-07 · Fixed in 14.60 CWE-400
Priority LOW 31
CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55.
CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00373 · Published 2026-07-15 · Fixed in 14.55 CWE-400
Priority LOW 31
CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56.
CVSS 4.0HIGH 7.0· Network · High privileges · No interaction · EPSS 0.00433 · Published 2025-07-30 · Fixed in 13.56 CWE-502
Priority LOW 31
There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to server version 13.55.
CVSS 4.0MEDIUM 6.9· Network · High privileges · No interaction · EPSS 0.00481 · Published 2025-06-12 · Fixed in 13.55 CWE-20
Priority LOW 31
CVE-2025-27703 is a privilege escalation vulnerability in the management console of Absolute Secure Access prior to version 13.54.
CVSS 4.0HIGH 7.0· Network · High privileges · No interaction · EPSS 0.00311 · Published 2025-05-28 · Fixed in 13.54 CWE-281
Load more
THREATIST.IORead the docs