Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

54 records

Vendor: Absolute Security Component: Secure Access Clear all filters
TI-2026-39972 CVE-2026-55402 · GHSA-fwr3-5whq-67v9

Out-of-bounds read in Absolute Security Secure Access

Priority LOW 38

CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00405 Published 2026-08-13 Fixed in 14.57 CWE-125
TI-2026-39971 CVE-2026-55401 · GHSA-8pcf-2r89-jjr2

NULL pointer dereference in Absolute Security Secure Access

Priority LOW 37

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00402 Published 2026-08-13 Fixed in 14.57 CWE-476
TI-2026-39970 CVE-2026-55400 · GHSA-rvwx-fgxf-5vwq

Integer overflow in Absolute Security Secure Access

Priority LOW 27

CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.0037 Published 2026-08-13 Fixed in 14.57 CWE-190
TI-2026-39968 CVE-2026-55398 · GHSA-h9wj-x3qv-rhcc

Memory management vulnerability in Secure Access clients

Priority LOW 36

CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00354 Published 2026-07-15 Fixed in 14.55 CWE-119
TI-2026-29607 CVE-2026-40956 · GHSA-jvpw-cpgf-j2vc

Memory disclosure in Secure Access Clients

Priority LOW 11

CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00269 Published 2026-07-15 Fixed in 14.55 CWE-200
TI-2026-29606 CVE-2026-40955 · GHSA-69fj-7q6w-ccg6

Integer underflow vulnerability in Secure Access clients

Priority LOW 11

CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00321 Published 2026-07-15 Fixed in 14.55 CWE-191
TI-2026-29605 CVE-2026-40954 · GHSA-h82q-53pj-q2j2

Integer underflow in Secure Access clients prior to 14.55

Priority LOW 11

CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00321 Published 2026-07-15 Fixed in 14.55 CWE-191
TI-2026-29604 CVE-2026-40953 · GHSA-9vvg-8c87-463f

Heap overflow in Secure Access clients

Priority LOW 28

CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55.

CVSS 4.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00098 Published 2026-07-15 Fixed in 14.55 CWE-787
TI-2026-29603 CVE-2026-40952 · GHSA-vj56-2hgh-hfqf

Privilge misconfiguration in Secure Access installers

Priority LOW 38

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00137 Published 2026-07-15 Fixed in 14.55 CWE-276
TI-2026-29600 CVE-2026-40949 · GHSA-xg64-r9fm-3hrf

Buffer overflow in Windows clients prior to 14.50

Priority LOW 29

CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.

CVSS 4.0MEDIUM 6.8 Local High privileges No interaction EPSS 0.00103 Published 2026-04-30 Fixed in 14.50 CWE-121
TI-2026-25848 CVE-2026-33452 · GHSA-c6r6-9h3c-3ccp

Buffer overflow in Windows clients prior to 14.50

Priority LOW 25

CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.

CVSS 4.0MEDIUM 5.9 Local No auth No interaction EPSS 0.00097 Published 2026-04-30 Fixed in 14.50 CWE-121
TI-2026-25845 CVE-2026-33449 · GHSA-f2pc-fmcq-2g57

Message handler buffer overflow in clients prior to 14.50

Priority LOW 12

CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50.

CVSS 4.0LOW 2.3 Network No auth User interaction EPSS 0.00235 Published 2026-04-30 Fixed in 14.50 CWE-121
TI-2026-25844 CVE-2026-33448 · GHSA-ch4c-87rp-4jfj

Format string vulnerability in MacOS clients prior to 14.50

Priority LOW 21

CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.001 Published 2026-04-30 Fixed in 14.50 CWE-200
Load more