Memory Management Vulnerability in Secure Access Clients and Servers by Absolute

CVE-2026-55398

What is CVE-2026-55398?

A memory management vulnerability has been identified in Absolute's Secure Access clients and servers, specifically affecting versions before 14.55. This flaw can be exploited by attackers who possess detailed knowledge of the tunnel protocol, allowing them to initiate a non-persistent denial of service (DoS) against the server. Consequently, the affected systems can become unresponsive, impacting availability and service continuity. Organizations using these vulnerable products should take immediate measures to update to the latest version to mitigate potential risks.

References