CVE-2026-97718: Critical severity vulnerability
CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control.
Event History
Frequently Asked Questions
What does an attacker need to exploit this issue?
The attacker needs to cause an administrator to perform an action, consistent with a cross-site request forgery attack. No attacker privileges are required according to the supplied vector.
Who is exposed?
Secure Access server deployments running version 14.60 are identified as affected. Administrators who can create accounts are the users whose actions can be abused.
What is the likely impact if exploitation succeeds?
An attacker can cause an administrator to create an account controlled by the attacker. The provided severity vector indicates potential high impact to confidentiality, integrity, and availability, including subsequent systems.