Skip to content
OpenAdvisories
High WID-SEC-2026-4289 5 CVEs

Absolute Secure Access: Mehrere Schwachstellen

Published Nov 2, 2026 · Updated Nov 2, 2026 · de-DE

Vendor: Absolute Software Product: Secure Access

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Absolute Secure Access ausnutzen, um einen Denial of Service Angriff durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und erweiterte Berechtigungen zu erlangen.

Product

Absolute Secure Access ist eine Sicherheitslösung, die einen sicheren Netzwerkzugriff für Endgeräte ermöglicht, unabhängig von deren Standort.

Vulnerabilities 5

  • Critical 9.4
    CVE-2026-97718

    CSRF in Secure Access Server v14.60

    CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server.  Because of a bypassed security control, an attacker can cause an admin to create an account under their control.

    Absolute Security Secure Access
  • Critical 9.3
    CVE-2026-116769

    Authentication bypass in Secure Access Servers

    CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to 14.61. Attackers can modify security settings of a client via the server.

    Absolute Security Secure Access
  • High 8.3
    CVE-2026-116766

    Improper input handling in Secure Access server

    CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server.

    Absolute Software Secure Access
  • High 7.1
    CVE-2026-116767

    Improper input handling in Secure Access servers

    CVE-2026-116767 is an improper input handling vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service.

    Absolute Software Secure Access
  • High 7.1
    CVE-2026-116768

    Missing length validation in Absolute Secure Access

    CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time.

    Absolute Software Secure Access

Revision history

  1. #1

    Initiale Fassung

References