Veille CVE

Mercredi 15 juillet 2026

11 CVE

Critique 0 Élevée 2 Moyenne 4 Faible 5 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Absolute Security Secure Access » ✕
  1. CVE-2026-55399 4.3 Moyenne

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access tunnel can create a non-persistent DoS against the publisher.

  2. CVE-2026-55398 3.7 Faible

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server.

  3. CVE-2026-33445 5.9 Moyenne

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server.

  4. CVE-2026-40958 3.7 Faible

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.

  5. CVE-2026-40957 7.5 Élevée

    Absolute Security Secure Access · Absolute secure access

    o   CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site could use it to potentially steal credentials from an unwary administrator.

  6. CVE-2026-40956 3.7 Faible

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.

  7. CVE-2026-40955 3.7 Faible

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.

  8. CVE-2026-40954 3.7 Faible

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client

  9. CVE-2026-40953 4.4 Moyenne

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator permissions can create a denial of service attack against the client over which they have control.

  10. CVE-2026-40952 7.8 Élevée

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location.

  11. CVE-2026-33443 5.9 Moyenne

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server.