Description
CVE-2026-40956
is a memory disclosure vulnerability in Secure Access client versions prior to 14.55.
Attackers with intimate knowledge of and total control over the tunnel protocol
can cause a small amount of random memory to leak.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Absolute Security | Secure Access | < 14.55 | 14.55 |
Advisories 1
- WID-SEC-2026-2381 Absolute Secure Access: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 15, 2026