critical9.4
CVE-2026-97718
CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server.
Impact
CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control.
An attacker can exploit this over the network, without logging in, but a user has to be involved, for example by viewing content. If it succeeds: high risk of data being read, high risk of data or systems being changed, high risk of outages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Absolute Security | Secure Access | Version 14.60 |
| Absolute Software | Secure Access | Version 14.60 |