CVE-2025-59595: is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12. An attacker can se

CVE-2025-59595 · Severity: high · CVSS 7.5 · Published 2025-11-04

CVE-2025-59595 is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12. An attacker can send a specially crafted packet to a server in a non-default configuration and cause the server to crash.

Technologies: Absolute Secure Access. Vendors: Absolute.

Quick answers

Is CVE-2025-59595 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2025-59595 being exploited in the wild.
How severe is CVE-2025-59595?
High severity, with a CVSS score of 7.5, published 4 November 2025.
Which products and versions are affected?
Absolute Secure Access. The advisory does not name versions.
Is there a fix for CVE-2025-59595?
No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
Am I affected by CVE-2025-59595?
Check whether you run Absolute Secure Access. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

  • Absolute Secure Access

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.