Improper Access Control Vulnerability in CatchPulse by SecureAge Technology
CVE-2026-55978

8.4HIGH

Key Information:

Vendor

Secureage

Status
CatcHPulse
Vendor
CVE Published:
6 August 2026

What is CVE-2026-55978?

An improper access control vulnerability in CatchPulse allows a non-administrative local attacker to exploit an unrestricted kernel filter communication port. This could enable the attacker to bypass the security enforcement policies established by CatchPulse, potentially leading to unauthorized access to sensitive system resources. The vulnerability emphasizes the need for effective access control measures to safeguard against unauthorized exploitation.

Affected Version(s)

CatchPulse 10.10.0 and earlier

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-20...
https://www.secureage.com/security-vulnerabilities#

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mr Ang Kar Min
.