CVE-2026-55399 is a resource exhaustion vulnerability affecting Absolute Security Secure Access publisher versions before 14.55. The flaw allows an attacker who has valid credentials to the Secure Access tunnel to cause a non-persistent denial-of-service condition by exhausting resources on the publisher component. The vulnerability is categorized under CWE-400 (Uncontrolled Resource Consumption). The CVSS 4.0 vector indicates network attack vector, low attack complexity, low privileges required, user interaction needed, and low impact on confidentiality, integrity, and availability. No official remediation or patch information is currently available from the vendor.

An attacker with valid credentials can cause a temporary denial-of-service condition on the Secure Access publisher by exhausting its resources. This disrupts availability of the service but does not impact confidentiality or integrity. The DoS is non-persistent, meaning the service may recover after the attack ceases. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the Secure Access tunnel to trusted users only and monitor for unusual resource consumption patterns. No official mitigation or temporary fix has been provided by the vendor at this time.