# Absolute Secure Access vulnerabilities Source: https://junglewise.ai/threats/technologies/absolute-secure-access Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 10 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/absolute-secure-access.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 17 vulnerabilities in Absolute Secure Access: 0 in the last 7 days and 5 in the last 90 days, 2 of them critical and 0 exploited in the wild. The most recent, CVE-2026-116768, was published on 2 November 2026. 5 vulnerabilities in the last four weeks, up from none in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 5 - Last 90 days: 5 - All time: 17 (2 critical, 0 exploited in the wild) ## Latest Absolute Secure Access vulnerabilities - [CVE-2026-116768: Absolute Secure Access missing length validation](https://junglewise.ai/threats/cve-2026-116768-is-a-missing-length-validation-vulnerability-in-secure-access) (info, published 2 Nov 2026) - [CVE-2026-116767: Absolute Secure Access improper input handling denial of service](https://junglewise.ai/threats/cve-2026-116767-is-an-improper-input-handling-vulnerability-in-secure-access) (info, published 2 Nov 2026) - [CVE-2026-116766: Absolute Secure Access improper input handling denial of service](https://junglewise.ai/threats/cve-2026-116766-is-an-improper-input-handling-vulnerability-in-the-secure-access) (info, published 2 Nov 2026) - [CVE-2026-97718: Absolute Secure Access cross-site request forgery](https://junglewise.ai/threats/cve-2026-97718-is-a-cross-site-request-forgery-vulnerability-in-version-14-60-of) (info, published 2 Nov 2026) - [CVE-2026-116769: Absolute Secure Access authentication bypass](https://junglewise.ai/threats/cve-2026-116769-is-an-authentication-bypass-vulnerability-in-secure-access) (info, published 2 Nov 2026) - [CVE-2026-40951: is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with local control of the W](https://junglewise.ai/threats/cve-2026-40951-is-a-memory-corruption-vulnerability-on-secure-access-windows) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-40950: is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client c](https://junglewise.ai/threats/cve-2026-40950-is-a-buffer-overflow-vulnerability-in-the-secure-access-server) (medium, CVSS 6.5, published 30 Apr 2026) - [CVE-2026-40949: is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the](https://junglewise.ai/threats/cve-2026-40949-is-a-buffer-overflow-vulnerability-in-the-secure-access-windows) (medium, CVSS 4.4, published 30 Apr 2026) - [CVE-2026-33452: is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the](https://junglewise.ai/threats/cve-2026-33452-is-a-buffer-overflow-vulnerability-in-the-secure-access-windows) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-33451: is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of](https://junglewise.ai/threats/cve-2026-33451-is-an-arbitrary-read-write-vulnerability-in-the-secure-access) (high, CVSS 7.8, published 30 Apr 2026) - [CVE-2026-33450: is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modifie](https://junglewise.ai/threats/cve-2026-33450-is-an-out-of-bounds-read-vulnerability-in-the-secure-access-macos) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-33449: is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a](https://junglewise.ai/threats/cve-2026-33449-is-a-buffer-overflow-in-a-message-handling-function-of-the-secure) (high, CVSS 7.5, published 30 Apr 2026) - [CVE-2026-33448: is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with](https://junglewise.ai/threats/cve-2026-33448-is-a-format-string-vulnerability-in-the-logging-subsystem-of) (low, CVSS 3.3, published 30 Apr 2026) - [CVE-2026-33447: is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a](https://junglewise.ai/threats/cve-2026-33447-is-a-buffer-overflow-in-a-message-parsing-function-of-the-secure) (critical, CVSS 9.8, published 30 Apr 2026) - [CVE-2026-33446: is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of](https://junglewise.ai/threats/cve-2026-33446-is-a-buffer-overflow-in-the-authentication-sub-system-of-the) (critical, CVSS 9.8, published 30 Apr 2026) - [CVE-2025-59596: is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14](https://junglewise.ai/threats/cve-2025-59596-is-a-denial-of-service-vulnerability-in-secure-access-windows) (medium, CVSS 6.5, published 4 Nov 2025) - [CVE-2025-59595: is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12. An attacker can se](https://junglewise.ai/threats/cve-2025-59595-is-an-internally-discovered-denial-of-service-vulnerability-in) (high, CVSS 7.5, published 4 Nov 2025) ## Most severe Absolute Secure Access vulnerabilities - [CVE-2026-33446: is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of](https://junglewise.ai/threats/cve-2026-33446-is-a-buffer-overflow-in-the-authentication-sub-system-of-the) (critical, CVSS 9.8, published 30 Apr 2026) - [CVE-2026-33447: is a buffer overflow in a message parsing function of the Secure Access client prior to 14.50. Attackers with control of a](https://junglewise.ai/threats/cve-2026-33447-is-a-buffer-overflow-in-a-message-parsing-function-of-the-secure) (critical, CVSS 9.8, published 30 Apr 2026) - [CVE-2026-33451: is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of](https://junglewise.ai/threats/cve-2026-33451-is-an-arbitrary-read-write-vulnerability-in-the-secure-access) (high, CVSS 7.8, published 30 Apr 2026) - [CVE-2025-59595: is an internally discovered denial of service vulnerability in versions of Secure Access prior to 14.12. An attacker can se](https://junglewise.ai/threats/cve-2025-59595-is-an-internally-discovered-denial-of-service-vulnerability-in) (high, CVSS 7.5, published 4 Nov 2025) - [CVE-2026-33449: is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a](https://junglewise.ai/threats/cve-2026-33449-is-a-buffer-overflow-in-a-message-handling-function-of-the-secure) (high, CVSS 7.5, published 30 Apr 2026) - [CVE-2026-40950: is a buffer overflow vulnerability in the Secure Access server prior to 14.50. Attackers with control of a modified client c](https://junglewise.ai/threats/cve-2026-40950-is-a-buffer-overflow-vulnerability-in-the-secure-access-server) (medium, CVSS 6.5, published 30 Apr 2026) - [CVE-2025-59596: is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14](https://junglewise.ai/threats/cve-2025-59596-is-a-denial-of-service-vulnerability-in-secure-access-windows) (medium, CVSS 6.5, published 4 Nov 2025) - [CVE-2026-33450: is an out of bounds read vulnerability in the Secure Access MacOS client prior to 14.50. Attackers with control of a modifie](https://junglewise.ai/threats/cve-2026-33450-is-an-out-of-bounds-read-vulnerability-in-the-secure-access-macos) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-40951: is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50. Attackers with local control of the W](https://junglewise.ai/threats/cve-2026-40951-is-a-memory-corruption-vulnerability-on-secure-access-windows) (medium, CVSS 5.5, published 30 Apr 2026) - [CVE-2026-33452: is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50. Attackers with local control of the](https://junglewise.ai/threats/cve-2026-33452-is-a-buffer-overflow-vulnerability-in-the-secure-access-windows) (medium, CVSS 5.5, published 30 Apr 2026) ## Vulnerabilities per week 5 vulnerabilities in the last four weeks, up from none in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 5 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Absolute Secure Access vulnerabilities", https://junglewise.ai/threats/technologies/absolute-secure-access, 10 November 2026.