Skip to content
OpenAdvisories
High · 7.1 CVE-2026-116768 EUVD-2026-115626GHSA-5cpp-r9fh-2wrc

Missing length validation in Absolute Secure Access

Published Nov 2, 2026 · Updated Nov 2, 2026 · Assigned by Absolute

Description

CVE-2026-116768 is a missing length validation vulnerability
in Secure Access servers prior to 14.61. Authenticated attackers can cause a
persistent denial of service when connecting for the first time.

Affected products

VendorProductAffectedFixed
Absolute Software Secure Access < 14.61 14.61

Advisories 1

References