CVE-2026-97715: Vulnerability in Absolute Security Secure Access

This vulnerability exists in the client registration process of Secure Access servers before version 14.60. Authenticated attackers can exploit the flaw by passing malformed data to the server, resulting in a persistent denial of service. The CVSS 4.0 base score is 7.1, reflecting network attack vector, low complexity, no privileges required beyond authentication, no user interaction, and high impact on availability. The vulnerability does not affect confidentiality or integrity.

An authenticated attacker can cause a persistent denial of service on Secure Access servers prior to version 14.60 by sending malformed data during client registration. This impacts the availability of the service but does not affect confidentiality or integrity. There are no reports of active exploitation in the wild.

Upgrade Secure Access to version 14.60 or later to remediate this vulnerability. Since the vulnerability is fixed in version 14.60, applying this official patch is the recommended mitigation. No additional vendor advisory or patch links are provided, so verify with Absolute Security for the official fix and update instructions.