This vulnerability (CVE-2026-55402) involves an out-of-bounds read in Absolute Security Secure Access servers before version 14.57. An attacker with a man-in-the-middle position can exploit this by sending specially crafted data packets to the server, resulting in a persistent denial of service. The CVSS 4.0 base score is 8.7, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on availability. No known exploits are reported in the wild. The vulnerability is classified under CWE-125 (Out-of-bounds Read).

Successful exploitation leads to a persistent denial of service on the Secure Access server, potentially disrupting availability of the service. There is no indication of confidentiality or integrity impact. The attack requires network access and no privileges or user interaction, making it relatively easy to exploit if an attacker can intercept or manipulate traffic.

A fixed version 14.57 or later is available to remediate this vulnerability. Users should upgrade Secure Access servers to version 14.57 or newer to eliminate this risk. Since this is not a cloud service, remediation depends on applying the official patch. No additional mitigations are specified.