Buffer Overflow Vulnerability in Secure Access Server by Absolute Networks
CVE-2026-40950

7.1HIGH

Key Information:

Vendor

Absolute Software

Status
Secure Access
Vendor
CVE Published:
30 April 2026

What is CVE-2026-40950?

A buffer overflow vulnerability exists in the Secure Access Server versions prior to 14.50. This flaw allows attackers with control of a modified client to send crafted messages that can lead to a denial of service. Exploiting this vulnerability can interrupt service availability, posing risks to users and systems reliant on the Secure Access Server.

Affected Version(s)

Secure Access Windows 0 < 14.50

References

https://www.absolute.com/platform/security-information/vu...

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.