Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

72 records

Vendor: Absolute Security Clear all filters
TI-2026-84114 CVE-2026-116768 · GHSA-5cpp-r9fh-2wrc

Missing length validation in Absolute Secure Access

Priority LOW 31

CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00294 Published 2026-11-02 Fixed in 14.61 CWE-20
TI-2026-84099 CVE-2026-116766 · GHSA-mfr2-xmp6-hxxj

Improper input handling in Absolute Software Secure Access

Priority LOW 35

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61.

CVSS 4.0HIGH 8.3 Network Low privileges No interaction EPSS 0.00226 Published 2026-11-02 Fixed in 14.61 CWE-20
TI-2026-84100 CVE-2026-116769 · GHSA-2v8x-56rq-wmw5

Authentication bypass in Absolute Security Secure Access Servers

Priority MEDIUM 46

CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to 14.61.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00408 Published 2026-11-02 Fixed in 14.61 CWE-287
TI-2026-69282 CVE-2026-97717 · GHSA-hjxj-jv2q-4v6h

Denial of service in Absolute Secure Access

Priority LOW 26

CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00226 Published 2026-10-07 Fixed in 14.60 CWE-400
TI-2026-69281 CVE-2026-97716 · GHSA-c452-52rv-vx45

Denial of service in Absolute Secure Access connection setup

Priority MEDIUM 44

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00344 Published 2026-10-07 Fixed in 14.60 CWE-400
TI-2026-39972 CVE-2026-55402 · GHSA-fwr3-5whq-67v9

Out-of-bounds read in Absolute Security Secure Access

Priority LOW 38

CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00405 Published 2026-08-13 Fixed in 14.57 CWE-125
TI-2026-39971 CVE-2026-55401 · GHSA-8pcf-2r89-jjr2

NULL pointer dereference in Absolute Security Secure Access

Priority LOW 37

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00402 Published 2026-08-13 Fixed in 14.57 CWE-476
TI-2026-39970 CVE-2026-55400 · GHSA-rvwx-fgxf-5vwq

Integer overflow in Absolute Security Secure Access

Priority LOW 27

CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.0037 Published 2026-08-13 Fixed in 14.57 CWE-190
TI-2026-39968 CVE-2026-55398 · GHSA-h9wj-x3qv-rhcc

Memory management vulnerability in Secure Access clients

Priority LOW 36

CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00354 Published 2026-07-15 Fixed in 14.55 CWE-119
TI-2026-29607 CVE-2026-40956 · GHSA-jvpw-cpgf-j2vc

Memory disclosure in Secure Access Clients

Priority LOW 11

CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00269 Published 2026-07-15 Fixed in 14.55 CWE-200
TI-2026-29606 CVE-2026-40955 · GHSA-69fj-7q6w-ccg6

Integer underflow vulnerability in Secure Access clients

Priority LOW 11

CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00321 Published 2026-07-15 Fixed in 14.55 CWE-191
TI-2026-29605 CVE-2026-40954 · GHSA-h82q-53pj-q2j2

Integer underflow in Secure Access clients prior to 14.55

Priority LOW 11

CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55.

CVSS 4.0LOW 2.1 Network No auth User interaction EPSS 0.00321 Published 2026-07-15 Fixed in 14.55 CWE-191
TI-2026-29604 CVE-2026-40953 · GHSA-9vvg-8c87-463f

Heap overflow in Secure Access clients

Priority LOW 28

CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55.

CVSS 4.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00098 Published 2026-07-15 Fixed in 14.55 CWE-787
TI-2026-29603 CVE-2026-40952 · GHSA-vj56-2hgh-hfqf

Privilge misconfiguration in Secure Access installers

Priority LOW 38

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55.

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00137 Published 2026-07-15 Fixed in 14.55 CWE-276
Load more