CVE-2026-40956 — Memory disclosure in Secure Access Clients

CVE-2026-40956

Memory disclosure in Secure Access Clients PUBLISHED

Description (CNA)

CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.

Affected (CNA)

Vendor / product	Versions
Absolute Security / Secure Access	affected 0 before 14.55

CWE

No CWE identifiers supplied.

References

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-40956

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.