SA
Product
Secure Access
38
CVEs
0
On KEV
8.7
Max CVSS
4
New 30D
Severity mix
Critical 0High 9Medium 16Low 13
Watch
Add Secure Access to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-97716 | 8.7 | Oct 7 | Denial of Service in Absolute Secure Access Affected: before 14.60 |
| CVE-2024-40872 | 8.4 | Jul 25 | Elevation of privilege in Absolute Secure Access clients and servers Affected: before 13.07 |
| CVE-2026-97714 | 8.2 | Oct 7 | Denial of service vulnerability in Secure Access Affected: before 14.60 |
| CVE-2026-40952 | 7.8 | Jul 15 | Privilge misconfiguration in Secure Access installers Affected: before 14.55 |
| CVE-2026-40957 | 7.5 | Jul 15 | Frameable content vulnerability in the Secure Access server login page Affected: before 14.55 |
| CVE-2026-0517 | 7.5 | Jan 17 | Denial of Service in Secure Access Servers Prior to 14.20. Affected: before 14.20 |
| CVE-2025-49080 | 7.5 | Jun 12 | Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54 Affected: 9.0 before 13.54 |
| CVE-2025-49083 | 7.2 | Jul 30 | Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 Affected: 12.00 before 13.56 |
| CVE-2026-97715 | 7.1 | Oct 7 | Denial of Service in Absolute Secure Access Affected: before 14.60 |
| CVE-2026-55400 | 6.5 | Aug 13 | CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57 Affected: before 14.57 |
| CVE-2025-59596 | 6.5 | Nov 4 | CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12 Affected: 12.0 before 14.12 |
| CVE-2025-54088 | 6.1 | Oct 2 | Open Redirect in Secure Access prior to 14.10 Affected: before <14.10 |
| CVE-2026-97717 | 6.0 | Oct 7 | Denial of Service in Absolute Secure Access Affected: before 14.60 |
| CVE-2025-27703 | 6.0 | May 28 | Privilege escalation in the management console of Absolute Secure Access prior to version 13.54 Affected: before 13.54 |
| CVE-2026-55402 | 5.9 | Aug 13 | CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57 Affected: before 14.57 |
| CVE-2026-33445 | 5.9 | Jul 15 | Memory management vulnerability in Secure Access servers Affected: before 14.55 |
| CVE-2026-33443 | 5.9 | Jul 15 | Memory management error in Secure Access servers prior to 14.55 Affected: before 14.55 |
| CVE-2025-27705 | 5.5 | Mar 19 | There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53 Affected: through 13.52 |
| CVE-2025-27704 | 5.5 | Mar 19 | There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53 Affected: through 13.52 |
| CVE-2026-55401 | 5.3 | Aug 13 | CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57 Affected: before 14.57 |
| CVE-2025-49081 | 4.9 | Jun 12 | Input validation vulnerability in the Secure Access prior to version 13.55 Affected: before 13.55 |
| CVE-2025-27702 | 4.9 | May 28 | Permissions bypass in the management console of Absolute Secure Access prior to version 13.54 Affected: before 13.54 |
| CVE-2026-0518 | 4.8 | Jan 17 | XSS in Secure Access Consoles prior to 14.20 Affected: before 14.20 |
| CVE-2026-40953 | 4.4 | Jul 15 | Heap overflow in Secure Access clients Affected: before 14.55 |
| CVE-2026-55399 | 4.3 | Jul 15 | Resource exhaustion vulnerability in the Secure Access publisher Affected: before 14.55 |
| CVE-2025-54085 | 3.8 | Jul 30 | Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 Affected: before 13.56 |
| CVE-2026-55398 | 3.7 | Jul 15 | Memory management vulnerability in Secure Access clients Affected: before 14.55 |
| CVE-2026-40958 | 3.7 | Jul 15 | Input validation error in Secure Access clients prior to 14.55 Affected: before 14.55 |
| CVE-2026-40956 | 3.7 | Jul 15 | Memory disclosure in Secure Access Clients Affected: before 14.55 |
| CVE-2026-40955 | 3.7 | Jul 15 | Integer underflow vulnerability in Secure Access clients Affected: before 14.55 |
| CVE-2026-40954 | 3.7 | Jul 15 | Integer underflow in Secure Access clients prior to 14.55 Affected: before 14.55 |
| CVE-2026-0519 | 3.4 | Jan 17 | Information Disclosure in Secure Access Between 12.70 and 14.20 Affected: 12.70 before 14.20 |
| CVE-2025-54089 | 3.4 | Oct 2 | Cross-site Scripting vulnerability in Secure Access prior to 14.10 Affected: before 14.10 |
| CVE-2025-27706 | 3.4 | May 28 | Cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54 Affected: before 13.54 |
| CVE-2024-40873 | 3.4 | Jul 25 | XSS in Secure Access administrative console Affected: before 13.07 |
| CVE-2025-54086 | 3.3 | Oct 2 | Excess Permissions in Warehouse Affected: before <14.10 |
| CVE-2025-49082 | 2.7 | Jul 30 | Permissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56 Affected: before 13.56 |
| CVE-2025-54087 | 2.6 | Oct 2 | Server-side request forgery in Secure Access Affected: before <14.10 |
Showing 38
