CVE-2026-33446

EUVD-2026-26413
CVE-2026-33446 is a buffer overflow in the authentication sub-system of 
the Secure Access client prior to 14.50. Attackers with control of a 
modified server can send a special packet that can overwrite a small 
portion of memory conceivably leading to memory corruption or a denial 
of service.
Classic Buffer Overflow
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
AbsoluteCNA
2.3 LOW
NETWORK
HIGH
NONE
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 15.22%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
absolutesecure_access
𝑥
< 14.50
CNA
Common Weakness Enumeration
References
https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-33446