What is CVE-2026-0519?

CVE-2026-0519 is a low-severity vulnerability in Absolute Secure Access, classified under Insertion of Sensitive Information into Log File. CVSS score: 3.4/10. Published 2026-01-17.

How severe is CVE-2026-0519?

Low severity. CVSS v3 base score is 3.4 out of 10.

Information disclosure in Absolute Secure Access

CVE-2026-0519

In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system.

EPSS: 0.001 (2.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.4 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N.

Affected products

Absolute Secure_access
Absolute Security Secure Access — versions 12.70

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

SecurityResponse@netmotionsoftware.com (Vendor Advisory)

Frequently asked questions

What is CVE-2026-0519?: CVE-2026-0519 is a low-severity vulnerability in Absolute Secure Access, classified under Insertion of Sensitive Information into Log File. CVSS score: 3.4/10. Published 2026-01-17.
How severe is CVE-2026-0519?: Low severity. CVSS v3 base score is 3.4 out of 10.