CVE-2026-33447

CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overwrite a small portion of memory conceivably leading to memory corruption or denial of service.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - SecurityResponse@netmotionsoftware.com

Published

2026-04-30

Last modified

2026-10-26

Weaknesses

CWE-121

Affected products

• Secure Access (Absolute)
• Secure Access (Absolute Software)

References

• https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-33447