CVE-2026-40953

CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator permissions can create a denial of service attack against the client over which they have control.

Score
CVSS 4.0 6.7 Medium
Status
Modified - SecurityResponse@netmotionsoftware.com
Published
2026-07-15
Last modified
2026-10-24
Weaknesses
CWE-787

Affected products

References