PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-97715 Absolute Security CVE debrief

CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service. This vulnerability affects Secure Access servers, potentially leading to operational disruptions. Defenders should assess exposure and prioritize upgrading to version 14.60 or later. The CVE record and source item provide limited information about the vulnerability, and additional verification is necessary.

Vendor
Absolute Security
Product
Secure Access
CVSS
HIGH 7.1
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-07
Original CVE updated
2026-10-07
Advisory published
2026-10-07
Advisory updated
2026-10-07

Who should care

Defenders responsible for Secure Access servers should assess exposure and prioritize upgrading to version 14.60 or later. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify exposure and implement necessary mitigations.

Why it matters

CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service. Defenders responsible for Secure Access servers should assess exposure and prioritize upgrading to version 14.60 or later.

  • Potential denial of service attacks against Secure Access servers
  • Need to verify exposure of Secure Access servers
  • Need to upgrade to version 14.60 or later

Technical summary

CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service. This vulnerability affects Secure Access servers, potentially leading to operational disruptions. Defenders should assess exposure and prioritize upgrading to version 14.60 or later.

Defensive priority

Defenders should prioritize verifying exposure of Secure Access servers and upgrading to version 14.60 or later.

Recommended defensive actions

  • Verify exposure of Secure Access servers
  • Upgrade to version 14.60 or later
  • Monitor for potential denial of service attacks

Evidence notes

The CVE record and source item provide limited information about the vulnerability. The vendor, Absolute Security, has provided a reference to their vulnerability archive.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-97715 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-97715

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-97715 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-97715

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Denial of Service in Absolute Secure Access

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97715.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-97715---7-1-high

    Supplemental source

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.