These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-97717 is a vulnerability in the proxy sub-system of Secure Access servers prior to 14.60. Authenticated attackers can send malformed data to the server and cause a persistent denial of service. This vulnerability affects Secure Access servers, potentially leading to operational disruptions. Defenders should assess exposure and impact, focusing on versions prior to 14.60. The CVE record and source [truncated]
CVE-2026-97716 is a high-severity vulnerability in Absolute Secure Access servers prior to version 14.60, allowing unauthenticated attackers to cause a persistent denial of service by sending specially crafted traffic to the server's connection set up sub-system. This vulnerability affects Secure Access servers and can be exploited by unauthenticated attackers. Defenders should prioritize verifying exposu [truncated]
CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service. This vulnerability affects Secure Access servers, potentially leading to operational disruptions. Defenders should assess exposure and prioritize upgrading to version 14.60 or later. The [truncated]
CVE-2026-97714 is a denial of service vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. An attacker can send a malformed response during authentication, causing a persistent denial of service. Defenders responsible for Secure Access servers should assess exposure and prioritize upgrading to mitigate potential denial of service attacks. This vulnerability has a [truncated]
CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57. Attackers with an ‘in the middle’ position can send specially crafted data to a server causing a persistent denial of service. This vulnerability has significant implications for organizations using affected Secure Access servers, as it could allow attackers to disrupt service. The CVE record was publish [truncated]
CVE-2026-55401 is a null dereference vulnerability in the load-balancing sub-system of Secure Access servers prior to version 14.57. An attacker can send an unauthenticated packet to a Secure Access server with load balancing enabled, causing the internal load balancer to crash. The Secure Access server remains operational, able to accept connections and issue a failover to connected clients. This vulnera [truncated]
CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site could use it to potentially steal credentials from an unwary administrator. This vulnerability has a CVSS score of 6.1 and is classified as MEDIUM severity. The vulnerability allows attackers to potentially steal credentials from administrators who are t [truncated]
CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. This vulnerability allows attackers with intimate knowledge of and total control over the tunnel protocol to create a non-persistent Denial of Service (DoS) against their client. The vulnerability has a CVSS score of 2.1, indicating a low severity. Users of Secure Access clients pr [truncated]
