Absolute Security - vulnerabilities (CVEs)

39 CVEs in 2 products, 4 in the last 30 days, newest from 2026-10-07.

Products

• Secure Access - 38 CVEs
• Absolute Persistence - 1 CVEs

Newest CVEs of Absolute Security

• CVE-2026-97717 - CVSS 6 (medium), 2026-10-07: CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the…
• CVE-2026-97716 - CVSS 8.7 (high), 2026-10-07: CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send…
• CVE-2026-97715 - CVSS 7.1 (high), 2026-10-07: CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass…
• CVE-2026-97714 - CVSS 8.2 (high), 2026-10-07: CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed…
• CVE-2026-55402 - CVSS 8.7 (high), 2026-08-13: CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send…
• CVE-2026-55401 - CVSS 6.9 (medium), 2026-08-13: CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an…
• CVE-2026-55400 - CVSS 6.5 (medium), 2026-08-13: CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted…
• CVE-2026-55399 - CVSS 5.1 (medium), 2026-07-15: CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access…
• CVE-2026-55398 - CVSS 6.9 (medium), 2026-07-15: CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total…
• CVE-2026-33445 - CVSS 8.7 (high), 2026-07-15: CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over…
• CVE-2026-33443 - CVSS 7.1 (high), 2026-07-15: CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel…
• CVE-2026-40958 - CVSS 3.7 (low), 2026-07-15: CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel…
• CVE-2026-40957 - CVSS 7.5 (high), 2026-07-15: o   CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site…
• CVE-2026-40956 - CVSS 3.7 (low), 2026-07-15: CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control…
• CVE-2026-40955 - CVSS 3.7 (low), 2026-07-15: CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate…
• CVE-2026-40954 - CVSS 3.7 (low), 2026-07-15: CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate…
• CVE-2026-40953 - CVSS 6.7 (medium), 2026-07-15: CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator…
• CVE-2026-40952 - CVSS 8.5 (high), 2026-07-15: CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local…
• CVE-2026-0519 - CVSS 4.6 (medium), 2026-01-17: In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party…
• CVE-2026-0518 - CVSS 4.8 (medium), 2026-01-17: CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with administrative privileges can interfere…
• CVE-2026-0517 - CVSS 7.5 (high), 2026-01-17: CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can send a specially crafted packet to a…
• CVE-2025-59596 - CVSS 6.5 (medium), 2025-11-04: CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local…
• CVE-2025-54088 - CVSS 6.1 (medium), 2025-10-02: CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an…
• CVE-2025-54089 - CVSS 4.6 (medium), 2025-10-02: CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with administrative access to the console can…
• CVE-2025-54087 - CVSS 2.6 (low), 2025-10-02: CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a…
• CVE-2025-54086 - CVSS 5.3 (medium), 2025-10-02: CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10. Attackers with access to…
• CVE-2025-54085 - CVSS 5.1 (medium), 2025-07-31: CVE-2025-54085 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the…
• CVE-2025-49083 - CVSS 7.2 (high), 2025-07-31: CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56. Attackers with…
• CVE-2025-49082 - CVSS 5.1 (medium), 2025-07-31: CVE-2025-49082 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the…
• CVE-2025-49081 - CVSS 6.9 (medium), 2025-06-12: There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to server version 13.55. Attackers with…