Veille CVE

Recherche « Absolute secure access »

20 CVE

Critique 0 Élevée 6 Moyenne 8 Faible 6 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Absolute secure access » ✕
  1. CVE-2026-97717 6.0 Moyenne

    Absolute Security Secure Access

    CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service.

  2. CVE-2026-97716 8.7 Élevée

    Absolute Security Secure Access

    CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service.

  3. CVE-2026-97715 7.1 Élevée

    Absolute Security Secure Access

    CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service.

  4. CVE-2026-97714 8.2 Élevée

    Absolute Security Secure Access

    CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication and cause a persistent denial of service.

  5. CVE-2026-55402 5.9 Moyenne

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send specially crafted data to a server causing a persistent denial of service.

  6. CVE-2026-55401 5.3 Moyenne

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful attack, the Secure Access server is still able to accept connections and is still able to issue a failover to connected clients. ‍ https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L

  7. CVE-2026-55400 6.5 Moyenne

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default configuration and cause a persistent denial of service.

  8. CVE-2026-13577 8.2 Élevée

    Dancer2 versions before 2.2.0 for Perl generate insecure session ids when required CSPRNG modules are unavailable. Dancer2::Core::Role::SessionFactory::generate_id silently falls back to a built-in rand-derived session id unless both Math::Random::ISAAC::XS and Crypt::URandom are available. The fallback session id is generated from a SHA-1 hash of a call to the built-in rand function, the absolute path of the Dancer2::Core::Role::SessionFactory module, an internal counter, the process id, the module instance memory address, and a shuffled string of characters (using the List::Util::shuffle function, which also uses the built-in rand function). These are all low-entropy and easily guessed sources. The built-in rand() function is seeded with 32-bits and considered unsuitable for security applications. Predictable session ids could allow an attacker to gain access to systems.

  9. CVE-2026-55399 4.3 Moyenne

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access tunnel can create a non-persistent DoS against the publisher.

  10. CVE-2026-55398 3.7 Faible

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server.

  11. CVE-2026-33445 5.9 Moyenne

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server.

  12. CVE-2026-33444 3.7 Faible

    Absolute Secutity Secure Access · Absolute secure access

    CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server.

  13. CVE-2026-40958 3.7 Faible

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.

  14. CVE-2026-40957 7.5 Élevée

    Absolute Security Secure Access · Absolute secure access

    o   CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site could use it to potentially steal credentials from an unwary administrator.

  15. CVE-2026-40956 3.7 Faible

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.

  16. CVE-2026-40955 3.7 Faible

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.

  17. CVE-2026-40954 3.7 Faible

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client

  18. CVE-2026-40953 4.4 Moyenne

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator permissions can create a denial of service attack against the client over which they have control.

  19. CVE-2026-40952 7.8 Élevée

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location.

  20. CVE-2026-33443 5.9 Moyenne

    Absolute Security Secure Access · Absolute secure access

    CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server.