TI-2026-13045 CVE-2026-15506 · GHSA-j5fg-5g4v-6437
SecureAge CatchPulse Driver saappctl.sys heap-based overflow
Priority HIGH 72
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3.
SecureAge
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
SecureAge records in CISA KEVNo SecureAge vulnerabilities are listed in CISA KEV.
Records
5 records
TI-2026-09888 CVE-2026-11459 · GHSA-pw43-h2x7-pm54
SecureAge CatchPulse IOCTL saappctl.sys information disclosure
Priority MEDIUM 55
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3.
TI-2026-40378 CVE-2026-55978 · GHSA-547c-jxf5-rw6f
Improper access control vulnerability in CatchPulse
Priority LOW 35
An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement.
TI-2026-40380 CVE-2026-55980 · GHSA-ffmw-m245-3h88
Denial-of-service vulnerability in CatchPulse
Priority LOW 24
A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition.
TI-2026-40379 CVE-2026-55979 · GHSA-7q9w-4j7c-8f3v
Improper access control check in CatchPulse's named pipe communication interface
Priority LOW 23
An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions.