Absolute Security

Records72All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

Absolute Security records in CISA KEV

No Absolute Security vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Secure Access 54 records MEDIUM Computrace Agent 3 records LOW Ctes Windows Agent 1 record MEDIUM Persistence 1 record LOW

Records

54 records in Secure Access · all components

TI-2026-25841 CVE-2026-33445 · GHSA-3jf9-378m-4gh9

Memory management vulnerability in Secure Access servers

MEDIUM 44

CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00405 Published 2026-07-15 Fixed in 14.55 CWE-400

TI-2026-39972 CVE-2026-55402 · GHSA-fwr3-5whq-67v9

Out-of-bounds read in Absolute Security Secure Access

LOW 38

CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00405 Published 2026-08-13 Fixed in 14.57 CWE-125

TI-2026-29603 CVE-2026-40952 · GHSA-vj56-2hgh-hfqf

Privilge misconfiguration in Secure Access installers

LOW 38

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00137 Published 2026-07-15 Fixed in 14.55 CWE-276

TI-2026-25847 CVE-2026-33451 · GHSA-qfmc-f7rr-gf93

Arbitrary read/write vulnerability in Windows clients prior to 14.50

LOW 38

CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00104 Published 2026-04-30 Fixed in 14.50 CWE-125

TI-2025-31193 CVE-2025-49080 · GHSA-qhf2-gm47-v465

Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54

LOW 38

There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.0037 Published 2025-06-12 Fixed in 13.54 CWE-762

TI-2026-39971 CVE-2026-55401 · GHSA-8pcf-2r89-jjr2

NULL pointer dereference in Absolute Security Secure Access

LOW 37

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00402 Published 2026-08-13 Fixed in 14.57 CWE-476

TI-2026-29601 CVE-2026-40950 · GHSA-c9f4-827x-gpm5

Buffer overflow in the Secure Access server prior to 14.50

LOW 37

CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00249 Published 2026-04-30 Fixed in 14.50 CWE-121

TI-2026-39968 CVE-2026-55398 · GHSA-h9wj-x3qv-rhcc

Memory management vulnerability in Secure Access clients

LOW 36

CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00354 Published 2026-07-15 Fixed in 14.55 CWE-119

TI-2026-25840 CVE-2026-33444 · GHSA-qc8f-gmjh-692q

Memory management vulnerability in Secure Access servers

LOW 36

CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00354 Published 2026-07-15 Fixed in 14.55 CWE-119

TI-2025-37124 CVE-2025-59595 · GHSA-xmpw-v77r-v8qg

Improper input validation in Absolute Security Secure Access

LOW 36

CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00374 Published 2025-11-04 Fixed in 14.12 CWE-20

TI-2026-25839 CVE-2026-33443 · GHSA-mcx7-4f56-9589

Memory management error in Secure Access servers prior to 14.55

LOW 31

CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00373 Published 2026-07-15 Fixed in 14.55 CWE-400

TI-2025-31196 CVE-2025-49083 · GHSA-5f4x-mf64-8g2r

Deserialization of untrusted data in Absolute Security Secure Access

LOW 31

CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56.

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.00433 Published 2025-07-30 Fixed in 13.56 CWE-502

TI-2025-31194 CVE-2025-49081 · GHSA-wh58-9hxp-jgfr

Input validation vulnerability in the Secure Access prior to version 13.55

LOW 31

There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to server version 13.55.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00481 Published 2025-06-12 Fixed in 13.55 CWE-20

TI-2025-20497 CVE-2025-27703 · GHSA-c3vv-fgcp-2m26

Privilege escalation in the management console of Absolute Secure Access prior to version 13.54

LOW 31

CVE-2025-27703 is a privilege escalation vulnerability in the management console of Absolute Secure Access prior to version 13.54.

CVSS 4.0HIGH 7.0 Network High privileges No interaction EPSS 0.00311 Published 2025-05-28 Fixed in 13.54 CWE-281

TI-2025-31197 CVE-2025-49084 · GHSA-wrg8-r7q6-v974

Incorrect default permissions in Absolutee Security Secure Access

LOW 30

CVE-2025-49084 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56.

CVSS 4.0MEDIUM 5.3 Network High privileges No interaction EPSS 0.00361 Published 2025-07-30 Fixed in 13.56 CWE-276

TI-2025-20496 CVE-2025-27702 · GHSA-jfpv-3cvw-74x9

Permissions bypass in the management console of Absolute Secure Access prior to version 13.54

LOW 30

CVE-2025-27702 is a vulnerability in the management console of Absolute Secure Access prior to version 13.54.

CVSS 4.0MEDIUM 6.9 Network High privileges No interaction EPSS 0.00321 Published 2025-05-28 Fixed in 13.54 CWE-284

TI-2026-29602 CVE-2026-40951 · GHSA-524g-f668-hjfv

Memory corruption in Secure Access Windows clients prior to 14.50

LOW 29

CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50.

CVSS 4.0MEDIUM 6.8 Local Low privileges No interaction EPSS 0.00095 Published 2026-04-30 Fixed in 14.50 CWE-400

TI-2026-29600 CVE-2026-40949 · GHSA-xg64-r9fm-3hrf

Buffer overflow in Windows clients prior to 14.50

LOW 29

CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.

CVSS 4.0MEDIUM 6.8 Local High privileges No interaction EPSS 0.00103 Published 2026-04-30 Fixed in 14.50 CWE-121

TI-2025-33929 CVE-2025-54086 · GHSA-6m24-hgh7-h454

Excess Permissions in Warehouse

LOW 29

CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00179 Published 2025-10-02 Fixed in <14.10 CWE-276

TI-2024-24862 CVE-2024-37350 · GHSA-m6hp-rq22-2f6w

Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06

LOW 29

There is a cross-site scripting vulnerability in the policy management UI of Absolute Secure Access prior to version 13.06.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0028 Published 2024-06-20 Fixed in 13.06 CWE-79

TI-2026-29608 CVE-2026-40957 · GHSA-37rq-xcjg-hcf6

Frameable content vulnerability in the Secure Access server login page

LOW 28

o CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55.

CVSS 4.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00428 Published 2026-07-15 Fixed in 14.55 CWE-1021

TI-2026-29604 CVE-2026-40953 · GHSA-9vvg-8c87-463f

Heap overflow in Secure Access clients

LOW 28

CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55.

CVSS 4.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00098 Published 2026-07-15 Fixed in 14.55 CWE-787

TI-2026-39970 CVE-2026-55400 · GHSA-rvwx-fgxf-5vwq

Integer overflow in Absolute Security Secure Access

LOW 27

CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.0037 Published 2026-08-13 Fixed in 14.57 CWE-190

TI-2026-00325 CVE-2026-0517 · GHSA-7r6x-p782-g6p6

Denial of Service in Secure Access Servers Prior to 14.20.

LOW 27

CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00314 Published 2026-01-17 Fixed in 14.20 CWE-400

TI-2025-37125 CVE-2025-59596 · GHSA-r879-mf96-p9qf

Improper input validation in Absolute Security Secure Access

LOW 26

CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12.

CVSS 4.0MEDIUM 6.0 Adjacent network No auth No interaction EPSS 0.00224 Published 2025-11-04 Fixed in 14.12 CWE-20

Open these records in search →