{"items":[{"id":"CVE-2026-116768","published":"2026-11-02T20:27:51.649Z","updated":"2026-11-02T21:21:35.467Z","title":"Missing length validation in Absolute Secure Access","severity":"HIGH","score":7.1,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00294,"kevAdded":null},{"id":"CVE-2026-116767","published":"2026-11-02T20:23:10.115Z","updated":"2026-11-06T17:55:37.827Z","title":"Improper input handling in Secure Access servers","severity":"HIGH","score":7.1,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2026-116766","published":"2026-11-02T20:16:26.614Z","updated":"2026-11-06T17:54:36.342Z","title":"Improper input handling in Secure Access server","severity":"HIGH","score":8.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2026-116769","published":"2026-11-02T20:06:19.670Z","updated":"2026-11-06T17:53:32.950Z","title":"Authentication bypass in Secure Access Servers","severity":"CRITICAL","score":9.3,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00404,"kevAdded":null},{"id":"CVE-2026-97718","published":"2026-11-02T20:00:40.552Z","updated":"2026-11-06T17:52:38.954Z","title":"CSRF in Secure Access Server v14.60","severity":"CRITICAL","score":9.4,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2026-97717","published":"2026-10-07T19:54:40.695Z","updated":"2026-10-07T20:33:27.748Z","title":"Denial of Service in Absolute Secure Access","severity":"MEDIUM","score":6,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2026-97716","published":"2026-10-07T19:41:12.734Z","updated":"2026-10-07T20:34:10.752Z","title":"Denial of Service in Absolute Secure Access","severity":"HIGH","score":8.7,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00344,"kevAdded":null},{"id":"CVE-2026-97715","published":"2026-10-07T19:30:14.513Z","updated":"2026-10-07T20:38:18.611Z","title":"Denial of Service in Absolute Secure Access","severity":"HIGH","score":7.1,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00226,"kevAdded":null},{"id":"CVE-2026-97714","published":"2026-10-07T19:20:14.565Z","updated":"2026-10-07T20:36:26.296Z","title":"Denial of service vulnerability in Secure Access","severity":"HIGH","score":8.2,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2026-55402","published":"2026-08-13T16:16:22.160Z","updated":"2026-08-13T19:02:45.126Z","title":"CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send…","severity":"HIGH","score":8.7,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2026-55401","published":"2026-08-13T16:11:08.672Z","updated":"2026-08-13T19:03:32.732Z","title":"CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an…","severity":"MEDIUM","score":6.9,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00402,"kevAdded":null},{"id":"CVE-2026-55400","published":"2026-08-13T16:05:10.423Z","updated":"2026-08-13T18:50:28.496Z","title":"CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted…","severity":"MEDIUM","score":6,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2026-55399","published":"2026-07-15T20:20:13.950Z","updated":"2026-07-16T13:07:32.872Z","title":"Resource exhaustion vulnerability in the Secure Access publisher","severity":"MEDIUM","score":5.1,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00367,"kevAdded":null},{"id":"CVE-2026-55398","published":"2026-07-15T20:17:00.166Z","updated":"2026-07-16T13:08:45.489Z","title":"Memory management vulnerability in Secure Access clients","severity":"MEDIUM","score":6.9,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2026-33445","published":"2026-07-15T20:13:55.272Z","updated":"2026-07-16T13:09:35.944Z","title":"Memory management vulnerability in Secure Access servers","severity":"HIGH","score":8.7,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00405,"kevAdded":null},{"id":"CVE-2026-33444","published":"2026-07-15T20:10:20.421Z","updated":"2026-07-16T13:10:18.013Z","title":"Memory management vulnerability in Secure Access servers","severity":"MEDIUM","score":6.9,"vendor":"Absolute Secutity","product":"Secure Access","kev":false,"epss":0.00354,"kevAdded":null},{"id":"CVE-2026-33443","published":"2026-07-15T20:06:30.711Z","updated":"2026-07-16T13:11:10.328Z","title":"Memory management error in Secure Access servers prior to 14.55","severity":"HIGH","score":7.1,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00373,"kevAdded":null},{"id":"CVE-2026-40958","published":"2026-07-15T20:02:59.125Z","updated":"2026-07-16T13:11:50.471Z","title":"Input validation error in Secure Access clients prior to 14.55","severity":"LOW","score":2.3,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00378,"kevAdded":null},{"id":"CVE-2026-40957","published":"2026-07-15T19:59:05.438Z","updated":"2026-07-16T13:16:38.543Z","title":"Frameable content vulnerability in the Secure Access server login page","severity":"MEDIUM","score":6.1,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00428,"kevAdded":null},{"id":"CVE-2026-40956","published":"2026-07-15T19:55:05.678Z","updated":"2026-07-16T13:12:35.493Z","title":"Memory disclosure in Secure Access Clients","severity":"LOW","score":2.1,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00269,"kevAdded":null},{"id":"CVE-2026-40955","published":"2026-07-15T19:50:55.979Z","updated":"2026-07-16T13:13:12.587Z","title":"Integer underflow vulnerability in Secure Access clients","severity":"LOW","score":2.1,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-40954","published":"2026-07-15T19:44:47.223Z","updated":"2026-07-16T13:15:09.379Z","title":"Integer underflow in Secure Access clients prior to 14.55","severity":"LOW","score":2.1,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2026-40953","published":"2026-07-15T19:40:50.435Z","updated":"2026-07-16T13:15:46.358Z","title":"Heap overflow in Secure Access clients","severity":"MEDIUM","score":6.7,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00098,"kevAdded":null},{"id":"CVE-2026-40952","published":"2026-07-15T19:32:58.728Z","updated":"2026-07-16T13:06:21.115Z","title":"Privilge misconfiguration in Secure Access installers","severity":"HIGH","score":8.5,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00137,"kevAdded":null},{"id":"CVE-2026-40951","published":"2026-04-30T20:22:16.201Z","updated":"2026-05-01T14:29:48.263Z","title":"Memory corruption in Secure Access Windows clients prior to 14.50","severity":"MEDIUM","score":6.8,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00095,"kevAdded":null},{"id":"CVE-2026-40950","published":"2026-04-30T20:19:11.609Z","updated":"2026-05-01T14:31:19.868Z","title":"Buffer overflow in the Secure Access server prior to 14.50","severity":"HIGH","score":7.1,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00249,"kevAdded":null},{"id":"CVE-2026-40949","published":"2026-04-30T20:16:19.912Z","updated":"2026-05-01T14:32:04.114Z","title":"Buffer overflow in Windows clients prior to 14.50","severity":"MEDIUM","score":6.8,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00103,"kevAdded":null},{"id":"CVE-2026-33452","published":"2026-04-30T20:12:16.166Z","updated":"2026-05-01T14:30:27.273Z","title":"Buffer overflow in Windows clients prior to 14.50","severity":"MEDIUM","score":5.9,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00097,"kevAdded":null},{"id":"CVE-2026-33451","published":"2026-04-30T20:08:03.213Z","updated":"2026-05-01T14:36:19.832Z","title":"Arbitrary read/write vulnerability in Windows clients prior to 14.50","severity":"HIGH","score":8.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00104,"kevAdded":null},{"id":"CVE-2026-33450","published":"2026-04-30T20:04:14.383Z","updated":"2026-05-01T14:35:43.451Z","title":"Out of bounds read in Secure Access MacOS clients prior to 14.50","severity":"LOW","score":2.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2026-33449","published":"2026-04-30T19:52:01.980Z","updated":"2026-05-01T14:33:13.244Z","title":"Message handler buffer overflow in clients prior to 14.50","severity":"LOW","score":2.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2026-33448","published":"2026-04-30T19:47:50.031Z","updated":"2026-05-01T14:35:03.996Z","title":"Format string vulnerability in MacOS clients prior to 14.50","severity":"MEDIUM","score":4.8,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.001,"kevAdded":null},{"id":"CVE-2026-33447","published":"2026-04-30T19:43:27.437Z","updated":"2026-05-01T14:32:40.680Z","title":"CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a modified server can…","severity":"LOW","score":2.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00252,"kevAdded":null},{"id":"CVE-2026-33446","published":"2026-04-30T19:36:37.319Z","updated":"2026-04-30T20:11:21.104Z","title":"Buffer overflow in client authentication prior to version 14.50","severity":"LOW","score":2.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00287,"kevAdded":null},{"id":"CVE-2026-0519","published":"2026-01-17T01:13:59.183Z","updated":"2026-01-20T18:39:13.845Z","title":"Information Disclosure in Secure Access Between 12.70 and 14.20","severity":"MEDIUM","score":4.6,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00135,"kevAdded":null},{"id":"CVE-2026-0518","published":"2026-01-17T01:09:29.268Z","updated":"2026-01-20T18:37:15.079Z","title":"XSS in Secure Access Consoles prior to 14.20","severity":"MEDIUM","score":4.8,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00173,"kevAdded":null},{"id":"CVE-2026-0517","published":"2026-01-17T01:04:55.634Z","updated":"2026-01-20T18:34:14.258Z","title":"Denial of Service in Secure Access Servers Prior to 14.20.","severity":"MEDIUM","score":6,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00314,"kevAdded":null},{"id":"CVE-2025-59596","published":"2025-11-04T22:51:31.244Z","updated":"2025-11-05T14:18:58.843Z","title":"CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local…","severity":"MEDIUM","score":6,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00224,"kevAdded":null},{"id":"CVE-2025-59595","published":"2025-11-04T22:46:38.884Z","updated":"2025-12-01T22:39:46.514Z","title":"CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12. An attacker can send a specially…","severity":"HIGH","score":8.2,"vendor":"Absolute","product":"Secure Access","kev":false,"epss":0.00374,"kevAdded":null},{"id":"CVE-2025-54089","published":"2025-10-02T20:15:09.464Z","updated":"2025-10-03T14:59:45.131Z","title":"Cross-site Scripting vulnerability in Secure Access prior to 14.10","severity":"MEDIUM","score":4.6,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2025-54088","published":"2025-10-02T20:10:52.425Z","updated":"2025-10-07T19:26:28.230Z","title":"Open Redirect in Secure Access prior to 14.10","severity":"MEDIUM","score":5.5,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2025-54087","published":"2025-10-02T20:05:38.092Z","updated":"2025-10-07T19:27:01.644Z","title":"Server-side request forgery in Secure Access","severity":"LOW","score":1.8,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00184,"kevAdded":null},{"id":"CVE-2025-54086","published":"2025-10-02T19:56:37.373Z","updated":"2025-10-06T18:35:14.588Z","title":"Excess Permissions in Warehouse","severity":"MEDIUM","score":5.3,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00179,"kevAdded":null},{"id":"CVE-2025-49082","published":"2025-07-30T23:45:30.677Z","updated":"2025-07-31T13:30:00.892Z","title":"Permissions bypass vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56","severity":"MEDIUM","score":5.1,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00265,"kevAdded":null},{"id":"CVE-2025-54085","published":"2025-07-30T23:40:28.441Z","updated":"2025-07-31T13:31:58.019Z","title":"Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56","severity":"MEDIUM","score":5.1,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00235,"kevAdded":null},{"id":"CVE-2025-49084","published":"2025-07-30T23:36:17.426Z","updated":"2025-07-31T13:33:49.578Z","title":"Elevation of privilege vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56","severity":"MEDIUM","score":5.3,"vendor":"Absolutee Security","product":"Secure Access","kev":false,"epss":0.00361,"kevAdded":null},{"id":"CVE-2025-49083","published":"2025-07-30T23:30:52.664Z","updated":"2025-07-31T13:37:21.184Z","title":"Data deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56","severity":"HIGH","score":7,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00433,"kevAdded":null},{"id":"CVE-2025-49081","published":"2025-06-12T17:25:47.812Z","updated":"2025-06-12T17:59:46.307Z","title":"Input validation vulnerability in the Secure Access prior to version 13.55","severity":"MEDIUM","score":6.9,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00481,"kevAdded":null},{"id":"CVE-2025-49080","published":"2025-06-12T17:08:50.086Z","updated":"2025-06-17T18:17:08.994Z","title":"Memory management vulnerability in Absolute Secure Access server versions 9.0 to 13.54","severity":"HIGH","score":8.7,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.0037,"kevAdded":null},{"id":"CVE-2025-27706","published":"2025-05-28T21:01:08.548Z","updated":"2025-05-28T23:55:03.442Z","title":"Cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.54","severity":"MEDIUM","score":4.6,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00251,"kevAdded":null},{"id":"CVE-2025-27703","published":"2025-05-28T20:56:53.459Z","updated":"2025-05-28T23:57:51.968Z","title":"Privilege escalation in the management console of Absolute Secure Access prior to version 13.54","severity":"HIGH","score":7,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00311,"kevAdded":null},{"id":"CVE-2025-27702","published":"2025-05-28T20:42:34.657Z","updated":"2025-05-28T23:54:02.125Z","title":"Permissions bypass in the management console of Absolute Secure Access prior to version 13.54","severity":"MEDIUM","score":6.9,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00321,"kevAdded":null},{"id":"CVE-2024-6364","published":"2025-05-13T17:00:07.443Z","updated":"2025-05-13T17:37:58.419Z","title":"Server Identity Validation Bypass in Absolute Persistence®","severity":"MEDIUM","score":6.9,"vendor":"Absolute Security","product":"Absolute Persistence","kev":false,"epss":0.00183,"kevAdded":null},{"id":"CVE-2025-27705","published":"2025-03-19T19:15:08.265Z","updated":"2025-03-19T20:06:42.594Z","title":"There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with…","severity":"MEDIUM","score":5.5,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2025-27704","published":"2025-03-19T19:08:26.262Z","updated":"2025-04-03T13:06:17.528Z","title":"There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with…","severity":"MEDIUM","score":5.5,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2024-40875","published":"2024-12-20T20:17:27.132Z","updated":"2024-12-24T15:57:03.223Z","title":"Cross-site scripting vulnerability in the Secure Access administrative console prior to 13.52","severity":"MEDIUM","score":5.9,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00316,"kevAdded":null},{"id":"CVE-2024-40873","published":"2024-07-25T17:19:28.906Z","updated":"2024-08-02T04:39:55.361Z","title":"XSS in Secure Access administrative console","severity":"MEDIUM","score":4.5,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-40872","published":"2024-07-25T17:00:38.151Z","updated":"2024-08-02T04:39:55.376Z","title":"Elevation of privilege in Absolute Secure Access clients and servers","severity":"HIGH","score":8.4,"vendor":"Absolute Security","product":"Secure Access","kev":false,"epss":0.00156,"kevAdded":null},{"id":"CVE-2024-37352","published":"2024-06-20T17:28:47.745Z","updated":"2024-08-02T03:50:56.158Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37351","published":"2024-06-20T17:25:09.306Z","updated":"2024-08-02T03:50:56.092Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37350","published":"2024-06-20T17:18:33.952Z","updated":"2024-08-02T03:50:56.219Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":6.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.0028,"kevAdded":null},{"id":"CVE-2024-37349","published":"2024-06-20T17:11:52.447Z","updated":"2024-08-02T03:50:55.914Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37348","published":"2024-06-20T17:05:04.866Z","updated":"2024-08-02T03:50:56.211Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37347","published":"2024-06-20T16:56:50.468Z","updated":"2024-08-02T03:50:55.946Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37346","published":"2024-06-20T16:51:37.265Z","updated":"2024-08-02T03:50:55.993Z","title":"Insufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06","severity":"MEDIUM","score":4.9,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.004,"kevAdded":null},{"id":"CVE-2024-37345","published":"2024-06-20T16:45:51.929Z","updated":"2024-08-02T03:50:56.264Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":5.3,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00219,"kevAdded":null},{"id":"CVE-2024-37344","published":"2024-06-20T16:38:26.256Z","updated":"2024-08-02T03:50:56.114Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.5,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.00268,"kevAdded":null},{"id":"CVE-2024-37343","published":"2024-06-20T16:30:21.053Z","updated":"2024-08-02T03:50:55.892Z","title":"Cross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06","severity":"MEDIUM","score":4.8,"vendor":"Absolute Software","product":"Secure Access","kev":false,"epss":0.0022,"kevAdded":null}]}