CVE-2026-40956: falha de baixa gravidade em Absolute Security Secure Access
Memory disclosure in Secure Access Clients
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 2.1epss 0.3%
CVE-2026-40956
is a memory disclosure vulnerability in Secure Access client versions prior to 14.55.
Attackers with intimate knowledge of and total control over the tunnel protocol
can cause a small amount of random memory to leak.
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
Produtos afetados
Absolute Security · Secure AccessCVEs relacionadas — Absolute Security Secure Access
No mesmo produto, das mais perigosas para as menos.
CVE-2025-49081MEDIUMInput validation vulnerability in the Secure Access prior to version 13.55EPSS 0.5%CVE-2025-49083HIGHData deserialization vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.56EPSS 0.4%CVE-2026-40957MEDIUMFrameable content vulnerability in the Secure Access server login pageEPSS 0.4%CVE-2026-55402HIGHCVE-2026-55402EPSS 0.4%CVE-2026-33445HIGHMemory management vulnerability in Secure Access serversEPSS 0.4%CVE-2026-55401MEDIUMCVE-2026-55401EPSS 0.4%