{"id":"CVE-2026-116766","kind":"vulnerability","aliases":["CVE-2026-116766"],"related":[],"title":"Secure Access server: improper input handling enables persistent denial of service","description":"CVE-2026-116766 is an improper input handling vulnerability\nin the Secure Access server versions between 13.0 and prior to 14.61. Attackers\ncan cause a persistent denial of service of the server.","summary":"A flaw in how the Secure Access server handles input lets an attacker make the server stop working until it is restored. The sources describe a persistent denial of service and give a CVSS score of 8.3.","severity":"high","cvss":8.3,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["infrastructure","secure-access","self-hosted","vpn-gateway"],"not_affected_if":["version-outside-range"],"how_to_check":"- Check the installed Secure Access server version against the affected range (13.0 up to but not including 14.61).\n- Confirm the exact product name and build from the vendor's admin console; the sources do not give a check path.","fix":"- Move to a version at or above `14.61`, the first release outside the stated affected range.","status":"open","published_at":"2026-11-02T21:17:24+00:00","first_seen_at":"2026-11-02T21:35:40+00:00","triaged_at":"2026-11-02T21:37:05+00:00","updated_at":"2026-11-02T21:37:05+00:00","category":"infrastructure","confidence":0.6,"triage":{"at":"2026-11-02T21:37:05Z","model":"claude-haiku-5-5","output":{"fix":"- Move to a version at or above `14.61`, the first release outside the stated affected range.","reach":"unknown","title":"Secure Access server: improper input handling enables persistent denial of service","impact":"low","summary":"A flaw in how the Secure Access server handles input lets an attacker make the server stop working until it is restored. The sources describe a persistent denial of service and give a CVSS score of 8.3.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["secure-access","vpn-gateway","self-hosted"],"confidence":0.6,"fix_status":"available","needs_auth":"unknown","worst_case":"Server becomes unavailable to users until it is restored","analyst_note":"Confirm the affected product name, whether the input comes from unauthenticated network traffic, and the vendor advisory for version 14.61 via the NVD link.","how_to_check":"- Check the installed Secure Access server version against the affected range (13.0 up to but not including 14.61).\n- Confirm the exact product name and build from the vendor's admin console; the sources do not give a check path.","plain_action":"","needs_analyst":true,"not_affected_if":["version-outside-range"],"who_is_affected":"Organizations running a Secure Access server in the affected version range (13.0 to before 14.61) are exposed. The sources do not say which deployment modes or configurations are required, so teams on other versions can skip this entry.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000672,"input_tokens":4095,"output_tokens":524,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-116766':14A,17A,67C '-2026':13A,16A,66C '13.0':81C '14.61':85C '8.3':64B 'access':2A,21B,34B,77C 'attack':40B,86C 'caus':88C 'cve':12A,15A,65C 'cvss':61B 'denial':9A,55B,91C 'describ':52B 'enabl':7A 'flaw':29B 'gateway':27B 'give':59B 'handl':6A,36B,72C 'host':24B 'improp':4A,70C 'infrastructur':18B 'input':5A,37B,71C 'let':38B 'make':41B 'persist':8A,54B,90C 'prior':83C 'restor':49B 'score':62B 'secur':1A,20B,33B,76C 'secure-access':19B 'self':23B 'self-host':22B 'server':3A,35B,43B,78C,96C 'servic':11A,57B,93C 'sourc':51B 'stop':44B 'version':79C 'vpn':26B 'vpn-gateway':25B 'vulner':73C 'work':45B","nicknames":[],"mitigations":[],"who_affected":"Organizations running a Secure Access server in the affected version range (13.0 to before 14.61) are exposed. The sources do not say which deployment modes or configurations are required, so teams on other versions can skip this entry.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"available","audience":"businesses","plain_action":null,"pkeys":[],"ptokens":[],"labels":["high","infrastructure","secureaccess","selfhosted","vpngateway"],"first_public_at":"2026-11-02T21:17:24+00:00","kev":null,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","cvss_by":"SecurityResponse@netmotionsoftware.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116766","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116766","severity":null,"published_at":"2026-11-02T21:17:24+00:00","modified_at":"2026-11-02T21:17:24+00:00","first_seen_at":"2026-11-02T21:35:40+00:00","fetched_at":"2026-11-02T21:35:40+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}