CVE-2026-40957 — Frameable content vulnerability in the Secure Access server login page

CVE-2026-40957

Frameable content vulnerability in the Secure Access server login page PUBLISHED

Description (CNA)

o CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site could use it to potentially steal credentials from an unwary administrator.

Affected (CNA)

Vendor / product	Versions
Absolute Security / Secure Access	affected 0 before 14.55

CWE

No CWE identifiers supplied.

References

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-40957

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.