Heap Overflow in Secure Access Clients by Absolute Software
CVE-2026-40953

6.7MEDIUM

Key Information:

Vendor

Absolute Security

Status
Secure Access
Vendor
CVE Published:
15 July 2026

What is CVE-2026-40953?

The heap overflow vulnerability in the certificate parsing function of Secure Access clients can allow local attackers with administrator privileges to exploit the system. By gaining control over affected clients, these users may execute a denial of service attack, disrupting service and potentially compromising system integrity. It is imperative for users to update to version 14.55 or later to mitigate this risk.

Affected Version(s)

Secure Access 0 < 14.55

References

https://www.absolute.com/platform/security-information/vu...

CVSS V4

Score:
6.7
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.