Absolute Security Secure Access
34 CVEs affecting Absolute Security Secure Access. Latest disclosed: 2026-08-13. Critical: 0, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-40872 | High | 8.4 | 2024-07-25 | There is an elevation of privilege vulnerability in server and client components of Absolute Secure Access prior to version 13.07. Attackers with local access… |
CVE-2026-40952 | High | 7.8 | 2026-07-15 | CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local ac… |
CVE-2026-40957 | High | 7.5 | 2026-07-15 | o CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site c… |
CVE-2026-0517 | High | 7.5 | 2026-01-17 | CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can send a specially crafted packet to a s… |
CVE-2025-49080 | High | 7.5 | 2025-06-12 | There is a memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54. Attackers with network access to the server can cause a Deni… |
CVE-2025-49083 | High | 7.2 | 2025-07-31 | CVE-2025-49083 is a vulnerability in the management console of Absolute Secure Access after version 12.00 and prior to version 13.56. Attackers with administra… |
CVE-2025-59596 | Medium | 6.5 | 2025-11-04 | CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local net… |
CVE-2025-54088 | Medium | 6.1 | 2025-10-02 | CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbit… |
CVE-2025-27703 | Medium | 6.0 | 2025-05-28 | CVE-2025-27703 is a privilege escalation vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with administrat… |
CVE-2026-33445 | Medium | 5.9 | 2026-07-15 | CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the… |
CVE-2026-33443 | Medium | 5.9 | 2026-07-15 | CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel… |
CVE-2025-49081 | Medium | 4.9 | 2025-06-12 | There is an insufficient input validation vulnerability in the warehouse component of Absolute Secure Access prior to server version 13.55. Attackers with syst… |
CVE-2025-27702 | Medium | 4.9 | 2025-05-28 | CVE-2025-27702 is a vulnerability in the management console of Absolute Secure Access prior to version 13.54. Attackers with administrative access to the con… |
CVE-2026-0518 | Medium | 4.8 | 2026-01-17 | CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with administrative privileges can interfere w… |
CVE-2024-40873 | Medium | 4.5 | 2024-07-25 | There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.07. Attackers with syst… |
CVE-2026-40953 | Medium | 4.4 | 2026-07-15 | CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator pe… |
CVE-2026-55399 | Medium | 4.3 | 2026-07-15 | CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55. Attackers with valid credentials to the Secure Access tunn… |
CVE-2025-54085 | Low | 3.8 | 2025-07-31 | CVE-2025-54085 is a vulnerability in the management console of Absolute Secure Access prior to version 13.56. Attackers with administrative access to the conso… |
CVE-2026-55398 | Low | 3.7 | 2026-07-15 | CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total control… |
CVE-2026-40958 | Low | 3.7 | 2026-07-15 | CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel prot… |