CVE-2026-97715: Denial of Service in Absolute Secure Access
CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Absolute Secure Accessto a version that resolves this vulnerability.Fixed in 14.60
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be authenticated to a vulnerable Secure Access server and able to submit malformed data during the client registration process. The provided information does not indicate that unauthenticated attackers can exploit it.
What is the impact of a successful attack?
Successful exploitation can cause a persistent denial of service on the Secure Access server. The supplied CVSS vector indicates availability impact, with no stated impact on confidentiality or integrity.
Which deployments should be prioritized for remediation?
Secure Access servers running versions earlier than 14.60 should be prioritized, particularly where authenticated users can perform client registration. Updating to version 14.60 or later addresses the affected version range described.