01 Record

CVE-2026-55400

CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default

MediumPUBLISHEDCNA: Absolute

Base score6.0 CVSS v4.0CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

View raw JSON CVE Program record

02 Description

CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57. Attackers with an authenticated session can send specially crafted traffic to a server in a non-default

03 Metadata

Published: 2026-08-13 16:05Z1 DAY AGO
Last updated: 2026-08-13 18:50Z23 HR AGO
Reserved: 2026-06-16
Assigning CNA: Absolute
Record state: PUBLISHED
Severity: Medium (CVSS 6.0)
CVSS vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Weaknesses: CWE-190
SSVC decision: ExploitationnoneAutomatablenoTechnical Impactpartial
Data version: 5.2
Document digest: 3fa1a42409ce76669e658449d9e629ecda78abd9c27fb36f887199a914e66cb2

04 Affected products

VendorProductVersionsPlatforms

Absolute SecuritySecure Access0 to < 14.57—

05 References

www.absolute.comhttps://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-55400