01 Record

CVE-2026-55401

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with

MediumPUBLISHEDCNA: Absolute

Base score6.9 CVSS v4.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

View raw JSON CVE Program record

02 Description

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with

03 Metadata

Published: 2026-08-13 16:11Z1 DAY AGO
Last updated: 2026-08-13 19:03Z23 HR AGO
Reserved: 2026-06-16
Assigning CNA: Absolute
Record state: PUBLISHED
Severity: Medium (CVSS 6.9)
CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Weaknesses: CWE-476
SSVC decision: ExploitationnoneAutomatableyesTechnical Impactpartial
Data version: 5.2
Document digest: 2a38dfffa5cf39ddfe78245a3b036750944cbdd1323ea901f6b39abd4673aa67

04 Affected products

VendorProductVersionsPlatforms

Absolute SecuritySecure Access0 to < 14.57—

05 References

www.absolute.comhttps://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-55401