Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.2

Secure Access servers may stop working during login

CVE-2026-97714 · published 28 days ago
Summary

Versions of Secure Access released before 14.60 can be forced to stop responding when an attacker sends a specially crafted reply during the sign‑in process. This can make the server unavailable until it is restarted, disrupting users’ access to the system. Apply the vendor’s update to version 14.60 or later to prevent the problem.

What to do
  • Update absolute security secure access to version 14.60 or later.
Affected software
VendorProductAffected versions
absolute security secure access < 14.60
Original advisory text
Denial of service vulnerability in Secure Access
CVE-2026-97714
is a is a vulnerability in the authentication sub-system of Secure Access
servers prior to version 14.60. Attackers can send a malformed response during
authentication and cause a persistent denial of service.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
8.2 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-400Uncontrolled Resource Consumption
Timeline
Published7 Oct 2026
Updated4 Nov 2026
First seen7 Oct 2026
Sources
CVE-2026-97714 · NVD
CVE-2026-97714 · MITRE
Track software like this
Free during beta