PT-2026-60288 · Absolute Security+1 · Secure Access

Published 2026-07-15 · Updated 2026-07-15 · CVE-2026-40956

Mitre

CVSS v4.0

2.1

Low

Base vector

AV:N/AC:H/AT:P/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.

Fix

Related Identifiers

CVE-2026-40956

Affected Products

Secure Access

References · 2

• https://absolute.com/platform/security-information/vulnerability-archive/cve-2026-40956 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-40956 · Security Note