https://vulnogram.org/ Most recent CVEs assigned by Absolute Software (absolute). https://vulnogram.org/seaview/icons/absolute.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-97717 https://vulnogram.org/CVE-2026-97717 CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service. Medium Wed, 07 Oct 2026 19:54:40 GMT https://vulnogram.org/CVE-2026-97716 https://vulnogram.org/CVE-2026-97716 CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service. High Network Exploitable Wed, 07 Oct 2026 19:41:12 GMT https://vulnogram.org/CVE-2026-97715 https://vulnogram.org/CVE-2026-97715 CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service. High Wed, 07 Oct 2026 19:30:14 GMT https://vulnogram.org/CVE-2026-97714 https://vulnogram.org/CVE-2026-97714 CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication and cause a persistent denial of service. High Network Exploitable Wed, 07 Oct 2026 19:20:14 GMT https://vulnogram.org/CVE-2026-55402 https://vulnogram.org/CVE-2026-55402 CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send specially crafted data to a server causing a persistent denial of service. High Network Exploitable Thu, 13 Aug 2026 16:16:22 GMT https://vulnogram.org/CVE-2026-55401 https://vulnogram.org/CVE-2026-55401 CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the inte… Medium Network Exploitable Thu, 13 Aug 2026 16:11:08 GMT https://vulnogram.org/CVE-2026-55400 https://vulnogram.org/CVE-2026-55400 CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default configuration and cause a persistent denial of service. Medium Thu, 13 Aug 2026 16:05:10 GMT https://vulnogram.org/CVE-2026-55399 https://vulnogram.org/CVE-2026-55399 CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access tunnel can create a non-persistent DoS against the publisher. Medium Wed, 15 Jul 2026 20:20:13 GMT https://vulnogram.org/CVE-2026-55398 https://vulnogram.org/CVE-2026-55398 CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server. Medium Network Exploitable Wed, 15 Jul 2026 20:17:00 GMT https://vulnogram.org/CVE-2026-33445 https://vulnogram.org/CVE-2026-33445 CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server. High Network Exploitable Wed, 15 Jul 2026 20:13:55 GMT https://vulnogram.org/CVE-2026-33444 https://vulnogram.org/CVE-2026-33444 CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server. Medium Network Exploitable Wed, 15 Jul 2026 20:10:20 GMT https://vulnogram.org/CVE-2026-33443 https://vulnogram.org/CVE-2026-33443 CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server. High Wed, 15 Jul 2026 20:06:30 GMT https://vulnogram.org/CVE-2026-40958 https://vulnogram.org/CVE-2026-40958 CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client. Low Network Exploitable Wed, 15 Jul 2026 20:02:59 GMT https://vulnogram.org/CVE-2026-40957 https://vulnogram.org/CVE-2026-40957 o CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site could use it to potentially steal credentials from an unwary administrator. Medium Network Exploitable Wed, 15 Jul 2026 19:59:05 GMT https://vulnogram.org/CVE-2026-40956 https://vulnogram.org/CVE-2026-40956 CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak. Low Network Exploitable Wed, 15 Jul 2026 19:55:05 GMT https://vulnogram.org/CVE-2026-40955 https://vulnogram.org/CVE-2026-40955 CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against thei… Low Network Exploitable Wed, 15 Jul 2026 19:50:55 GMT https://vulnogram.org/CVE-2026-40954 https://vulnogram.org/CVE-2026-40954 CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against thei… Low Network Exploitable Wed, 15 Jul 2026 19:44:47 GMT https://vulnogram.org/CVE-2026-40953 https://vulnogram.org/CVE-2026-40953 CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator permissions can create a denial of service attack against the client over which they have con… Medium Wed, 15 Jul 2026 19:40:50 GMT https://vulnogram.org/CVE-2026-40952 https://vulnogram.org/CVE-2026-40952 CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure… High Wed, 15 Jul 2026 19:32:58 GMT https://vulnogram.org/CVE-2026-40951 https://vulnogram.org/CVE-2026-40951 CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and trigger a denial of service. Medium Thu, 30 Apr 2026 20:22:16 GMT https://vulnogram.org/CVE-2026-40950 https://vulnogram.org/CVE-2026-40950 CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client can send a specially crafted message to the server and cause a denial of service High Thu, 30 Apr 2026 20:19:11 GMT https://vulnogram.org/CVE-2026-40949 https://vulnogram.org/CVE-2026-40949 CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to trigger a denial of service. Medium Thu, 30 Apr 2026 20:16:19 GMT https://vulnogram.org/CVE-2026-33452 https://vulnogram.org/CVE-2026-33452 CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can use it to ‘blue screen’ the system. Medium Thu, 30 Apr 2026 20:12:16 GMT https://vulnogram.org/CVE-2026-33451 https://vulnogram.org/CVE-2026-33451 CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the Windows client can send malformed data to an API and elevate their level of privilege to system. High Thu, 30 Apr 2026 20:08:03 GMT https://vulnogram.org/CVE-2026-33450 https://vulnogram.org/CVE-2026-33450 CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modified server can send a malformed packet to the client causing a denial of service. Low Network Exploitable Thu, 30 Apr 2026 20:04:14 GMT https://vulnogram.org/CVE-2026-33449 https://vulnogram.org/CVE-2026-33449 CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographically valid message to the client, overwriting a small portion of memory… Low Network Exploitable Thu, 30 Apr 2026 19:52:01 GMT https://vulnogram.org/CVE-2026-33448 https://vulnogram.org/CVE-2026-33448 CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump the contents of a small portion of memory to the log f… Medium Thu, 30 Apr 2026 19:47:50 GMT https://vulnogram.org/CVE-2026-33447 https://vulnogram.org/CVE-2026-33447 CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overwrite a small portion of memory conceivably leading to me… Low Network Exploitable Thu, 30 Apr 2026 19:43:27 GMT https://vulnogram.org/CVE-2026-33446 https://vulnogram.org/CVE-2026-33446 CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overwrite a small portion of memory conceivably leading to… Low Network Exploitable Thu, 30 Apr 2026 19:36:37 GMT https://vulnogram.org/CVE-2026-0519 https://vulnogram.org/CVE-2026-0519 In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system. Medium Sat, 17 Jan 2026 01:13:59 GMT https://vulnogram.org/CVE-2026-0518 https://vulnogram.org/CVE-2026-0518 CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with administrative privileges can interfere with another administrator’s use of the console. Medium Sat, 17 Jan 2026 01:09:29 GMT https://vulnogram.org/CVE-2026-0517 https://vulnogram.org/CVE-2026-0517 CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can send a specially crafted packet to a server and cause the server to crash Medium Sat, 17 Jan 2026 01:04:55 GMT https://vulnogram.org/CVE-2025-59596 https://vulnogram.org/CVE-2025-59596 CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local networking policy is active, attackers on an adjacent network may be able to send a crafted pack… Medium Tue, 04 Nov 2025 22:51:31 GMT https://vulnogram.org/CVE-2025-59595 https://vulnogram.org/CVE-2025-59595 CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12. An attacker can send a specially crafted packet to a server in a non-default configuration and cause the server to crash. High Network Exploitable Tue, 04 Nov 2025 22:46:38 GMT https://vulnogram.org/CVE-2025-54089 https://vulnogram.org/CVE-2025-54089 CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10. Attackers with administrative access to the console can interfere with another administrator’s access to the console. The attack complexity is low; th… Medium Thu, 02 Oct 2025 20:15:09 GMT https://vulnogram.org/CVE-2025-54088 https://vulnogram.org/CVE-2025-54088 CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbitrary URL. The attack complexity is low, attack requirements are present, no privileges are… Medium Network Exploitable Thu, 02 Oct 2025 20:10:52 GMT https://vulnogram.org/CVE-2025-54087 https://vulnogram.org/CVE-2025-54087 CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10. Attackers with administrative privileges can publish a crafted test HTTP request originating from the Secure Access server. The attack complexity i… Low Thu, 02 Oct 2025 20:05:38 GMT https://vulnogram.org/CVE-2025-54086 https://vulnogram.org/CVE-2025-54086 CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10. Attackers with access to the local file system can read the Java keystore file. The attack complexity is low, there are… Medium Thu, 02 Oct 2025 19:56:37 GMT https://vulnogram.org/CVE-2025-49082 https://vulnogram.org/CVE-2025-49082 CVE-2025-49082 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to… Medium Wed, 30 Jul 2025 23:45:30 GMT https://vulnogram.org/CVE-2025-54085 https://vulnogram.org/CVE-2025-54085 CVE-2025-54085 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to… Medium Wed, 30 Jul 2025 23:40:28 GMT https://vulnogram.org/CVE-2025-49084 https://vulnogram.org/CVE-2025-49084 CVE-2025-49084 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access can overwrite policy rules without the requisite permissions. The attack complexity is low, attack requ… Medium Wed, 30 Jul 2025 23:36:17 GMT https://vulnogram.org/CVE-2025-49083 https://vulnogram.org/CVE-2025-49083 CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56. Attackers with administrative access to the console can cause unsafe content to be deserialized and executed in the… High Wed, 30 Jul 2025 23:30:52 GMT https://vulnogram.org/CVE-2025-49081 https://vulnogram.org/CVE-2025-49081 There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to server version 13.55. Attackers with system administrator permissions can impair the availability of the Secure Access administrativ… Medium Thu, 12 Jun 2025 17:25:47 GMT https://vulnogram.org/CVE-2025-49080 https://vulnogram.org/CVE-2025-49080 There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to the server can cause a Denial of Service by sending a specially crafted sequence of packets to the server. The attack… High Network Exploitable Thu, 12 Jun 2025 17:08:50 GMT https://vulnogram.org/CVE-2025-27706 https://vulnogram.org/CVE-2025-27706 CVE-2025-27706 is a cross-site scripting vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with system administrator permissions can interfere with another system administrator’s use of the management… Medium Wed, 28 May 2025 21:01:08 GMT https://vulnogram.org/CVE-2025-27703 https://vulnogram.org/CVE-2025-27703 CVE-2025-27703 is a privilege escalation vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with administrative access to a specific subset of privileged features in the console can elevate their permi… High Wed, 28 May 2025 20:56:53 GMT https://vulnogram.org/CVE-2025-27702 https://vulnogram.org/CVE-2025-27702 CVE-2025-27702 is a vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with administrative access to the console and who have been assigned a certain set of permissions can bypass those permissions to… Medium Wed, 28 May 2025 20:42:34 GMT https://vulnogram.org/CVE-2024-6364 https://vulnogram.org/CVE-2024-6364 A vulnerability in Absolute Persistence® versions before 2.8 exists when it is not activated. This may allow a skilled attacker with both physical access to the device, and full hostile network control, to initiate OS commands on the device. To remed… Medium Tue, 13 May 2025 17:00:07 GMT https://vulnogram.org/CVE-2025-27705 https://vulnogram.org/CVE-2025-27705 There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the m… Medium Network Exploitable Wed, 19 Mar 2025 19:15:08 GMT https://vulnogram.org/CVE-2025-27704 https://vulnogram.org/CVE-2025-27704 There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the m… Medium Network Exploitable Wed, 19 Mar 2025 19:08:26 GMT