# cve.now: Absolute Security

The newest entries naming Absolute Security as an affected vendor (up to 200), of 41 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-116769](https://cve.now/CVE-2026-116769.md): Authentication bypass in Secure Access Servers (CVSS 9.3)
- [CVE-2026-97718](https://cve.now/CVE-2026-97718.md): CSRF in Secure Access Server v14.60 (CVSS 9.4)
- [CVE-2026-97717](https://cve.now/CVE-2026-97717.md): Denial of Service in Absolute Secure Access (CVSS 6.0)
- [CVE-2026-97716](https://cve.now/CVE-2026-97716.md): Denial of Service in Absolute Secure Access (CVSS 8.7)
- [CVE-2026-97715](https://cve.now/CVE-2026-97715.md): Denial of Service in Absolute Secure Access (CVSS 7.1)
- [CVE-2026-97714](https://cve.now/CVE-2026-97714.md): Denial of service vulnerability in Secure Access (CVSS 8.2)
- [CVE-2026-55402](https://cve.now/CVE-2026-55402.md): CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. (CVSS 8.7)
- [CVE-2026-55401](https://cve.now/CVE-2026-55401.md): CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. (CVSS 6.9)
- [CVE-2026-55400](https://cve.now/CVE-2026-55400.md): CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. (CVSS 6.0)
- [CVE-2026-55399](https://cve.now/CVE-2026-55399.md): Resource exhaustion vulnerability in the Secure Access publisher (CVSS 5.1)
- [CVE-2026-55398](https://cve.now/CVE-2026-55398.md): Memory management vulnerability in Secure Access clients (CVSS 6.9)
- [CVE-2026-33445](https://cve.now/CVE-2026-33445.md): Memory management vulnerability in Secure Access servers (CVSS 8.7)
- [CVE-2026-33443](https://cve.now/CVE-2026-33443.md): Memory management error in Secure Access servers prior to 14.55 (CVSS 7.1)
- [CVE-2026-40958](https://cve.now/CVE-2026-40958.md): Input validation error in Secure Access clients prior to 14.55 (CVSS 2.3)
- [CVE-2026-40957](https://cve.now/CVE-2026-40957.md): Frameable content vulnerability in the Secure Access server login page (CVSS 6.1)
- [CVE-2026-40956](https://cve.now/CVE-2026-40956.md): Memory disclosure in Secure Access Clients (CVSS 2.1)
- [CVE-2026-40955](https://cve.now/CVE-2026-40955.md): Integer underflow vulnerability in Secure Access clients (CVSS 2.1)
- [CVE-2026-40954](https://cve.now/CVE-2026-40954.md): Integer underflow in Secure Access clients prior to 14.55 (CVSS 2.1)
- [CVE-2026-40953](https://cve.now/CVE-2026-40953.md): Heap overflow in Secure Access clients (CVSS 6.7)
- [CVE-2026-40952](https://cve.now/CVE-2026-40952.md): Privilge misconfiguration in Secure Access installers (CVSS 8.5)
- [CVE-2026-0519](https://cve.now/CVE-2026-0519.md): Information Disclosure in Secure Access Between 12.70 and 14.20 (CVSS 4.6)
- [CVE-2026-0518](https://cve.now/CVE-2026-0518.md): XSS in Secure Access Consoles prior to 14.20 (CVSS 4.8)
- [CVE-2026-0517](https://cve.now/CVE-2026-0517.md): Denial of Service in Secure Access Servers Prior to 14.20. (CVSS 6.0)
- [CVE-2025-59596](https://cve.now/CVE-2025-59596.md): CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14 (CVSS 6.0)
- [CVE-2025-54089](https://cve.now/CVE-2025-54089.md): Cross-site Scripting vulnerability in Secure Access prior to 14.10 (CVSS 4.6)
- [CVE-2025-54088](https://cve.now/CVE-2025-54088.md): Open Redirect in Secure Access prior to 14.10 (CVSS 5.5)
- [CVE-2025-54087](https://cve.now/CVE-2025-54087.md): Server-side request forgery in Secure Access (CVSS 1.8)
- [CVE-2025-54086](https://cve.now/CVE-2025-54086.md): Excess Permissions in Warehouse (CVSS 5.3)
- [CVE-2025-49082](https://cve.now/CVE-2025-49082.md): Permissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 (CVSS 5.1)
- [CVE-2025-54085](https://cve.now/CVE-2025-54085.md): Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 (CVSS 5.1)
- [CVE-2025-49083](https://cve.now/CVE-2025-49083.md): Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 (CVSS 7.0)
- [CVE-2025-49081](https://cve.now/CVE-2025-49081.md): Input validation vulnerability in the Secure Access prior to version 13.55 (CVSS 6.9)
- [CVE-2025-49080](https://cve.now/CVE-2025-49080.md): Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54 (CVSS 8.7)
- [CVE-2025-27706](https://cve.now/CVE-2025-27706.md): Cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54 (CVSS 4.6)
- [CVE-2025-27703](https://cve.now/CVE-2025-27703.md): Privilege escalation in the management console of Absolute Secure Access prior to version 13.54 (CVSS 7.0)
- [CVE-2025-27702](https://cve.now/CVE-2025-27702.md): Permissions bypass in the management console of Absolute Secure Access prior to version 13.54 (CVSS 6.9)
- [CVE-2024-6364](https://cve.now/CVE-2024-6364.md): Server Identity Validation Bypass in Absolute Persistence® (CVSS 6.9)
- [CVE-2025-27705](https://cve.now/CVE-2025-27705.md): There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. (CVSS 5.5)
- [CVE-2025-27704](https://cve.now/CVE-2025-27704.md): There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. (CVSS 5.5)
- [CVE-2024-40873](https://cve.now/CVE-2024-40873.md): XSS in Secure Access administrative console (CVSS 4.5)
- [CVE-2024-40872](https://cve.now/CVE-2024-40872.md): Elevation of privilege in Absolute Secure Access clients and servers (CVSS 8.4)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/absolute-security
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.