secure_access vulnerabilities
CVEs whose affected-version data names the secure_access package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
11 CVEsRSS
CVE-2026-97717Medium· 6.0CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60
CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service.
CVE-2026-97716High· 8.7CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60
CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service.
CVE-2026-97715High· 7.1CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60
CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service.
CVE-2026-97714High· 8.2CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60
CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication and cause a persistent denial of service.
CVE-2026-55402Medium· 5.9CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57
CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send specially crafted data to a server causing a persistent denial of service.
CVE-2026-55401Medium· 5.3CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57
CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which res…
CVE-2026-55400Medium· 6.5CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57
CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default configuration and cause a persistent denia…
CVE-2025-54089Low· 3.4CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10
CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with administrative access to the console can interfere with another administrator’s access to the console. The attack complexi…
CVE-2025-54088Medium· 6.1CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10
CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbitrary URL. The attack complexity is low, attack requirements are present, no pr…
CVE-2025-54087Low· 2.6CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10
CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack…
CVE-2025-54086Low· 3.3CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10
CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10. Attackers with access to the local file system can read the Java keystore file. The attack complexity is l…