Skip to content
OpenAdvisories
Medium WID-SEC-2026-2381 8 CVEs

Absolute Secure Access: Mehrere Schwachstellen

Published Jul 15, 2026 · Updated Jul 15, 2026 · de-DE

Vendor: Absolute Software Product: Secure Access

Summary

Ein Angreifer kann mehrere Schwachstellen in Absolute Secure Access ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.

Product

Absolute Secure Access ist eine Sicherheitslösung, die einen sicheren Netzwerkzugriff für Endgeräte ermöglicht, unabhängig von deren Standort.

Vulnerabilities 8

  • High 8.7
    CVE-2026-33445

    Memory management vulnerability in Secure Access servers

    CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server.

    Absolute Security Secure Access
  • High 7.1
    CVE-2026-33443

    Memory management error in Secure Access servers prior to 14.55

    CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server.

    Absolute Security Secure Access
  • Medium 6.9
    CVE-2026-33444

    Memory management vulnerability in Secure Access servers

    CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server.

    Absolute Secutity Secure Access
  • Medium 6.9
    CVE-2026-55398

    Memory management vulnerability in Secure Access clients

    CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server.

    Absolute Security Secure Access
  • Medium 6.1
    CVE-2026-40957

    Frameable content vulnerability in the Secure Access server login page

    o   CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site could use it to potentially steal credentials from an unwary administrator.

    Absolute Security Secure Access
  • Medium 5.1
    CVE-2026-55399

    Resource exhaustion vulnerability in the Secure Access publisher

    CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access tunnel can create a non-persistent DoS against the publisher.

    Absolute Security Secure Access
  • Low 2.3
    CVE-2026-40958

    Input validation error in Secure Access clients prior to 14.55

    CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.

    Absolute Security Secure Access
  • Low 2.1
    CVE-2026-40956

    Memory disclosure in Secure Access Clients

    CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.

    Absolute Security Secure Access

Revision history

  1. #1

    Initiale Fassung

References