CVE-2026-116767: fallo de gravedad alta en Absolute Software Secure Access
Improper input handling in Secure Access servers
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
21Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 7.1epss 0.2%
CVE-2026-116767 is an improper input handling vulnerability
in Secure Access servers prior to 14.61. Authenticated attackers can cause a
persistent denial of service.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:L
Productos afectados
Absolute Software · Secure AccessCVEs relacionadas — Absolute Software Secure Access
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-37346MEDIUMInsufficient input validation vulnerability in the Absolute Secure Access Warehouse prior to 13.06EPSS 0.4%CVE-2024-40875MEDIUMCross-site scripting vulnerability in the Secure Access administrative console prior to 13.52EPSS 0.3%CVE-2026-116768HIGHMissing length validation in Absolute Secure AccessEPSS 0.3%CVE-2026-33446LOWBuffer overflow in client authentication prior to version 14.50EPSS 0.3%CVE-2024-37350MEDIUMCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06EPSS 0.3%CVE-2024-37352MEDIUMCross-site scripting vulnerability in the Absolute Secure Access administrative console prior to 13.06EPSS 0.3%