CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57

CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12

Open Redirect in Secure Access prior to 14.10

Denial of Service in Absolute Secure Access

Privilege escalation in the management console of Absolute Secure Access prior to version 13.54

CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57

Memory management vulnerability in Secure Access servers

Memory management error in Secure Access servers prior to 14.55

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53

There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57

Input validation vulnerability in the Secure Access prior to version 13.55

Permissions bypass in the management console of Absolute Secure Access prior to version 13.54

XSS in Secure Access Consoles prior to 14.20

Heap overflow in Secure Access clients

Resource exhaustion vulnerability in the Secure Access publisher