CVE-2026-40955

EUVD-2026-44788
CVE-2026-40955 is an integer underflow
vulnerability in the traffic parsing function of Secure Access clients prior to
14.55. Attackers with intimate knowledge of and total control over the tunnel
protocol can create a non-persistent DoS against their client.
Wrap or Wraparound
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.7 LOW
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 24.3%
Affected Products (NVD)
VendorProductVersion
absolutesecure_access
𝑥
< 14.55
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-40955