low3.7
CVE-2026-40956
CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55.
Impact
CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Absolute | Secure Access | before 14.55 |