CVE-2026-40953: Heap overflow in Secure Access clients
Published Jul 15, 2026
·Updated
CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator permissions can create a denial of service attack against the client over which they have control.
Affected Software
2 affected components
Secure Access clients<14.55
Absolute Secure Access<14.55
Event History
Jul 15, 2026
CVE Published
via MITRE·07:40 PM
Data Sourced
via MITRE·07:40 PM
Description
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-40953?
CVE-2026-40953 has a risk score of 16, indicating a significant vulnerability.
2
What type of vulnerability is CVE-2026-40953?
CVE-2026-40953 is a heap overflow vulnerability found in the certificate parsing function of Secure Access clients.
3
Who can exploit CVE-2026-40953?
Attackers with local access and administrator permissions can exploit CVE-2026-40953.
4
What is the impact of CVE-2026-40953?
CVE-2026-40953 can lead to a denial of service attack against the affected Secure Access clients.
5
How do I mitigate CVE-2026-40953?
To mitigate CVE-2026-40953, ensure you update Secure Access clients to version 14.55 or later.