CVE-2026-116768: Input Validation
Published Nov 2, 2026
·Updated
CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time.
Event History
Nov 2, 2026
CVE Published
via NVD·09:17 PM
Data Sourced
via NVD·09:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker must be authenticated to a vulnerable Secure Access server. The issue affects servers prior to version 14.61.
2
What is the likely impact of exploitation?
An authenticated attacker can trigger a persistent denial of service when connecting to the server for the first time. The provided impact information indicates availability impact, with no confidentiality impact.
3
Does exploitation require user interaction or complex attack conditions?
No user interaction is required, and the attack complexity is rated low. The attacker must have network access and authenticated privileges.