Absolute Security vulnerabilities
41 CVEs and advisories name Absolute Security as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-116769Authentication bypass in Secure Access Servers
- CVE-2026-97718CSRF in Secure Access Server v14.60
- CVE-2026-97717Denial of Service in Absolute Secure Access
- CVE-2026-97716Denial of Service in Absolute Secure Access
- CVE-2026-97715Denial of Service in Absolute Secure Access
- CVE-2026-97714Denial of service vulnerability in Secure Access
- CVE-2026-55402CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57.
- CVE-2026-55401CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57.
- CVE-2026-55400CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57.
- CVE-2026-55399Resource exhaustion vulnerability in the Secure Access publisher
- CVE-2026-55398Memory management vulnerability in Secure Access clients
- CVE-2026-33445Memory management vulnerability in Secure Access servers
- CVE-2026-33443Memory management error in Secure Access servers prior to 14.55
- CVE-2026-40958Input validation error in Secure Access clients prior to 14.55
- CVE-2026-40957Frameable content vulnerability in the Secure Access server login page
- CVE-2026-40956Memory disclosure in Secure Access Clients
- CVE-2026-40955Integer underflow vulnerability in Secure Access clients
- CVE-2026-40954Integer underflow in Secure Access clients prior to 14.55
- CVE-2026-40953Heap overflow in Secure Access clients
- CVE-2026-40952Privilge misconfiguration in Secure Access installers
- CVE-2026-0519Information Disclosure in Secure Access Between 12.70 and 14.20
- CVE-2026-0518XSS in Secure Access Consoles prior to 14.20
- CVE-2026-0517Denial of Service in Secure Access Servers Prior to 14.20.
- CVE-2025-59596CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14
- CVE-2025-54089Cross-site Scripting vulnerability in Secure Access prior to 14.10
- CVE-2025-54088Open Redirect in Secure Access prior to 14.10
- CVE-2025-54087Server-side request forgery in Secure Access
- CVE-2025-54086Excess Permissions in Warehouse
- CVE-2025-49082Permissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56
- CVE-2025-54085Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56