CVE-2026-0519: Information Disclosure in Secure Access Between 12.70 and 14.20
Published Jan 17, 2026
·Updated
In Secure Access 12.70 and prior to 14.20, the logging subsystem may write an unredacted authentication token to logs under certain configurations. Any party with access to those logs could read the token and reuse it to access an integrated system.
Affected Software
2 affected components
Secure Access Secure Access>=12.70<14.20
Absolute Secure Access>=12.70<14.20
Event History
Jan 17, 2026
CVE Published
via MITRE·01:13 AM
Data Sourced
via MITRE·01:13 AM
Description
Data Sourced
via NVD·02:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-0519?
CVE-2026-0519 has a moderate severity rating due to the potential for information disclosure.
2
How do I fix CVE-2026-0519?
To fix CVE-2026-0519, upgrade your Secure Access software to version 14.20 or later.
3
What are the consequences of CVE-2026-0519?
If exploited, CVE-2026-0519 allows unauthorized users to access unredacted authentication tokens, compromising security.
4
Which versions of Secure Access are affected by CVE-2026-0519?
Secure Access versions between 12.70 and 14.20 are affected by CVE-2026-0519.
5
Is it safe to use Secure Access versions 12.70 to 14.20 after CVE-2026-0519 is disclosed?
It is not safe to use affected versions of Secure Access until they are upgraded to a secure version.