PT-2026-3334 · Unknown · Secure Access

Published 2026-01-17 · Updated 2026-01-17 · CVE-2026-0519

Positive Technologies (AI Summary)

CVSS v4.0

4.6

Medium

Base vector

AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Secure Access versions 12.70 through 14.19

Description The logging subsystem may write an unredacted authentication token to logs under certain configurations. Access to these logs could allow an unauthorized party to read the token and reuse it to access an integrated system.

Recommendations Update to version 14.20 or later.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2026-0519

Affected Products

Secure Access

References · 4

• https://absolute.com/platform/security-information/vulnerability-archive/cve-2026-0519 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0519 · Security Note
• https://osv.dev/vulnerability/CVE-2026-0519 · Vendor Advisory
• https://twitter.com/CVEnew/status/2012490359893287320 · Twitter Post