What is CVE-2026-40955?

CVE-2026-40955 is a low-severity vulnerability in Absolute Secure Access, classified under Integer Underflow. CVSS score: 3.7/10. Published 2026-07-15.

How severe is CVE-2026-40955?

Low severity. CVSS v3 base score is 3.7 out of 10.

Integer overflow in Absolute Secure Access

CVE-2026-40955

CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.

EPSS: 0.003 (24.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Absolute Secure_access
Absolute Security Secure Access — versions 0

Weakness classification (CWE)

CWE-191 — Integer Underflow

References

SecurityResponse@netmotionsoftware.com (Vendor Advisory)

Frequently asked questions

What is CVE-2026-40955?: CVE-2026-40955 is a low-severity vulnerability in Absolute Secure Access, classified under Integer Underflow. CVSS score: 3.7/10. Published 2026-07-15.
How severe is CVE-2026-40955?: Low severity. CVSS v3 base score is 3.7 out of 10.