Authentication Bypass Vulnerability in Secure Access Servers by Absolute
CVE-2026-116769

9.3CRITICAL

Key Information:

Vendor

Absolute Security

Status
Secure Access
Vendor
CVE Published:
2 November 2026

What is CVE-2026-116769?

This vulnerability allows unauthorized attackers to bypass authentication mechanisms in Secure Access servers, enabling them to alter security settings of connected clients. Specifically, servers running versions 13.0 up to but not including 14.61 are impacted, posing a significant risk to the security and integrity of client data.

Affected Version(s)

Secure Access 13.0 < 14.61

References

https://www.absolute.com/platform/security-information/vu...

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.