CVE-2026-40952 — Privilge misconfiguration in Secure Access installers

CVE-2026-40952

Privilge misconfiguration in Secure Access installers PUBLISHED

Description (CNA)

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location.

Affected (CNA)

Vendor / product	Versions
Absolute Security / Secure Access	affected 0 before 14.55

CWE

No CWE identifiers supplied.

References

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-40952

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.