Memory Disclosure Vulnerability in Secure Access Client by Absolute Software
CVE-2026-40956

2.1LOW

Key Information:

Vendor

Absolute Security

Status
Secure Access
Vendor
CVE Published:
15 July 2026

What is CVE-2026-40956?

A memory disclosure vulnerability exists in the Secure Access Client prior to version 14.55. This flaw allows attackers with detailed knowledge of the tunnel protocol to extract a small amount of random memory. Such exposure can potentially lead to unauthorized information disclosure, compromising the security and confidentiality of sensitive data.

Affected Version(s)

Secure Access 0 < 14.55

References

https://www.absolute.com/platform/security-information/vu...

CVSS V4

Score:
2.1
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.