CVE-2026-40956

LOW CVSS 3.7 View on NVD ↗

Description

CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.

CVSS Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected Products

absolute/secure_access

References

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-40956

Published: Jul 15, 2026 20:17 UTC Modified: Jul 16, 2026 14:16 UTC