CVE-2026-116769: Critical severity vulnerability

Published Nov 2, 2026

Updated

CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to 14.61. Attackers can modify security settings of a client via the server.

Event History

Nov 2, 2026

CVE Published

via NVD·08:17 PM

Data Sourced

via NVD·08:17 PM

DescriptionSeverity

Frequently Asked Questions

Which deployments are affected?

Secure Access servers running version 13.0 or later but earlier than 14.61 are affected.

What does an attacker need to exploit this issue?

The severity vector indicates exploitation is network-accessible, requires low attack complexity, and does not require privileges or user interaction.

What could an attacker do after exploitation?

An attacker can modify a client's security settings through the Secure Access server. The listed impacts include high integrity impact on the vulnerable and subsequent systems.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.