CVE-2026-40949

CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to trigger a denial of service.

Score

CVSS 4.0 6.8 Medium

Status

Analyzed - SecurityResponse@netmotionsoftware.com

Published

2026-04-30

Last modified

2026-10-26

Weaknesses

CWE-121

Affected products

• Secure Access (Absolute)
• Secure Access (Absolute Software)

References

• https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-40949