CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,503 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,503
Show in the list
Critical, last 7 days
360
Show in the list
Healthcare-tagged, last 7 days
5
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product absolute:secure_access. Show all products

34 CVEs, showing 1 to 34
CVESeverityTitlePublished
CVE-2025-54086Low 3.3CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10.Oct 2, 2025
CVE-2025-54087Low 2.6CVE-2025-54087 is a server-side request forgery vulnerability in Secure Access prior to version 14.10.Oct 2, 2025
CVE-2025-54088Medium 6.1CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10.Oct 2, 2025
CVE-2025-54089Low 3.4CVE-2025-54089 is a cross-site scripting vulnerability in versions of secure access prior to 14.10.Oct 2, 2025
CVE-2025-59595High 7.5CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12.Nov 4, 2025
CVE-2025-59596Medium 6.5CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12.Nov 4, 2025
CVE-2026-0517High 7.5CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20.Jan 17, 2026
CVE-2026-0518Medium 4.8CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20.Jan 17, 2026
CVE-2026-0519Low 3.4In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations.Jan 17, 2026
CVE-2026-33446Critical 9.8CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50.Apr 30, 2026
CVE-2026-33447Critical 9.8CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50.Apr 30, 2026
CVE-2026-33448Low 3.3CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50.Apr 30, 2026
CVE-2026-33449High 7.5CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50.Apr 30, 2026
CVE-2026-33450Medium 5.5CVE-2026-33450 is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50.Apr 30, 2026
CVE-2026-33451High 7.8CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50.Apr 30, 2026
CVE-2026-33452Medium 5.5CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Apr 30, 2026
CVE-2026-40949Medium 4.4CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Apr 30, 2026
CVE-2026-40950Medium 6.5CVE-2026-40950 is a buffer overflow vulnerability in the Secure Access server prior to 14.50.Apr 30, 2026
CVE-2026-40951Medium 5.5CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50.Apr 30, 2026
CVE-2026-33443Medium 5.9CVE-2026-33443 is a memory management error in Secure Access servers prior to 14.55.Jul 15, 2026
CVE-2026-40952High 7.8CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55.Jul 15, 2026
CVE-2026-40953Medium 4.4CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55.Jul 15, 2026
CVE-2026-40954Low 3.7CVE-2026-40954 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55.Jul 15, 2026
CVE-2026-40955Low 3.7CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55.Jul 15, 2026
CVE-2026-40956Low 3.7CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55.Jul 15, 2026
CVE-2026-40957High 7.5o CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55.Jul 15, 2026
CVE-2026-40958Low 3.7CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55.Jul 15, 2026
CVE-2026-33444Low 3.7CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55.Jul 15, 2026
CVE-2026-33445Medium 5.9CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55.Jul 15, 2026
CVE-2026-55398Low 3.7CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55.Jul 15, 2026
CVE-2026-55399Medium 4.3CVE-2026-55399 is a resource exhaustion vulnerability in the Secure Access publisher prior to 14.55.Jul 15, 2026
CVE-2026-55400Medium 6.0CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57.
Assigned by Absolute
Aug 13, 2026
CVE-2026-55401Medium 6.9CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57.
Assigned by Absolute
Aug 13, 2026
CVE-2026-55402High 8.7CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57.
Assigned by Absolute
Aug 13, 2026

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.