SA
Product
Secure Access
by Absolute Security · last CVE Oct 7, 2026
38
CVEs
0
On KEV
8.7
Max CVSS
4
New 30D
Severity mix
Critical 0High 9Medium 16Low 13
Watch

Add Secure Access to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-97716
8.7
0%
Oct 7
Denial of Service in Absolute Secure Access
Affected: before 14.60
CVE-2024-40872
8.4
0%
Jul 25
Elevation of privilege in Absolute Secure Access clients and servers
Affected: before 13.07
CVE-2026-97714
8.2
0%
Oct 7
Denial of service vulnerability in Secure Access
Affected: before 14.60
CVE-2026-40952
7.8
0%
Jul 15
Privilge misconfiguration in Secure Access installers
Affected: before 14.55
CVE-2026-40957
7.5
0%
Jul 15
Frameable content vulnerability in the Secure Access server login page
Affected: before 14.55
CVE-2026-0517
7.5
0%
Jan 17
Denial of Service in Secure Access Servers Prior to 14.20.
Affected: before 14.20
CVE-2025-49080
7.5
0%
Jun 12
Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54
Affected: 9.0 before 13.54
CVE-2025-49083
7.2
0%
Jul 30
Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56
Affected: 12.00 before 13.56
CVE-2026-97715
7.1
0%
Oct 7
Denial of Service in Absolute Secure Access
Affected: before 14.60
CVE-2026-55400
6.5
0%
Aug 13
CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57
Affected: before 14.57
CVE-2025-59596
6.5
0%
Nov 4
CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12
Affected: 12.0 before 14.12
CVE-2025-54088
6.1
0%
Oct 2
Open Redirect in Secure Access prior to 14.10
Affected: before <14.10
CVE-2026-97717
6.0
0%
Oct 7
Denial of Service in Absolute Secure Access
Affected: before 14.60
CVE-2025-27703
6.0
0%
May 28
Privilege escalation in the management console of Absolute Secure Access prior to version 13.54
Affected: before 13.54
CVE-2026-55402
5.9
0%
Aug 13
CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57
Affected: before 14.57
CVE-2026-33445
5.9
0%
Jul 15
Memory management vulnerability in Secure Access servers
Affected: before 14.55
CVE-2026-33443
5.9
0%
Jul 15
Memory management error in Secure Access servers prior to 14.55
Affected: before 14.55
CVE-2025-27705
5.5
0%
Mar 19
There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53
Affected: through 13.52
CVE-2025-27704
5.5
0%
Mar 19
There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53
Affected: through 13.52
CVE-2026-55401
5.3
0%
Aug 13
CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57
Affected: before 14.57
CVE-2025-49081
4.9
0%
Jun 12
Input validation vulnerability in the Secure Access prior to version 13.55
Affected: before 13.55
CVE-2025-27702
4.9
0%
May 28
Permissions bypass in the management console of Absolute Secure Access prior to version 13.54
Affected: before 13.54
CVE-2026-0518
4.8
0%
Jan 17
XSS in Secure Access Consoles prior to 14.20
Affected: before 14.20
CVE-2026-40953
4.4
0%
Jul 15
Heap overflow in Secure Access clients
Affected: before 14.55
CVE-2026-55399
4.3
0%
Jul 15
Resource exhaustion vulnerability in the Secure Access publisher
Affected: before 14.55
CVE-2025-54085
3.8
0%
Jul 30
Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56
Affected: before 13.56
CVE-2026-55398
3.7
0%
Jul 15
Memory management vulnerability in Secure Access clients
Affected: before 14.55
CVE-2026-40958
3.7
0%
Jul 15
Input validation error in Secure Access clients prior to 14.55
Affected: before 14.55
CVE-2026-40956
3.7
0%
Jul 15
Memory disclosure in Secure Access Clients
Affected: before 14.55
CVE-2026-40955
3.7
0%
Jul 15
Integer underflow vulnerability in Secure Access clients
Affected: before 14.55
CVE-2026-40954
3.7
0%
Jul 15
Integer underflow in Secure Access clients prior to 14.55
Affected: before 14.55
CVE-2026-0519
3.4
0%
Jan 17
Information Disclosure in Secure Access Between 12.70 and 14.20
Affected: 12.70 before 14.20
CVE-2025-54089
3.4
0%
Oct 2
Cross-site Scripting vulnerability in Secure Access prior to 14.10
Affected: before 14.10
CVE-2025-27706
3.4
0%
May 28
Cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54
Affected: before 13.54
CVE-2024-40873
3.4
0%
Jul 25
XSS in Secure Access administrative console
Affected: before 13.07
CVE-2025-54086
3.3
0%
Oct 2
Excess Permissions in Warehouse
Affected: before <14.10
CVE-2025-49082
2.7
0%
Jul 30
Permissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56
Affected: before 13.56
CVE-2025-54087
2.6
0%
Oct 2
Server-side request forgery in Secure Access
Affected: before <14.10
Showing 38