CVE-2026-97716: Denial of Service in Absolute Secure Access
CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Absolute Secure Accessto a version that resolves this vulnerability.Fixed in 14.60
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Absolute Secure Access servers running versions prior to 14.60 are affected. The issue is in the connection setup subsystem.
Does an attacker need credentials or user interaction to trigger the denial of service?
No. The CVSS vector indicates network reachability, no privileges required, and no user interaction; an unauthenticated attacker can send specially crafted traffic to the server.
What is the expected impact if exploitation succeeds?
Successful exploitation can cause a persistent denial of service on the affected Secure Access server. The provided CVSS vector identifies availability as the impacted security property.