CVE-2026-40955 — Integer underflow vulnerability in Secure Access clients

CVE-2026-40955

Integer underflow vulnerability in Secure Access clients PUBLISHED

Description (CNA)

CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.

Affected (CNA)

Vendor / product	Versions
Absolute Security / Secure Access	affected 0 before 14.55

CWE

No CWE identifiers supplied.

References

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-40955

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.