Skip to content
OpenAdvisories
Low · 2.3 CVE-2026-33449 EUVD-2026-26421GHSA-f2pc-fmcq-2g57

Message handler buffer overflow in clients prior to 14.50

Published Apr 30, 2026 · Updated May 1, 2026 · Assigned by Absolute

Description

CVE-2026-33449 is a buffer overflow in a message handling function of
the Secure Access client prior to 14.50. Attackers with control of
a modified server can send a cryptographically valid message to the
client, overwriting a small portion of memory conceivably leading to a
denial of service.

Affected products

VendorProductAffectedFixed
Absolute Software Secure Access < 14.50 14.50

Advisories 1

References