Live › vulnerability › CVE-2026-116768
Secure Access servers before 14.61 do not validate the length of some input. An authenticated user who connects for the first time can trigger a persistent denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 21:35 UTC. All times on this page are UTC.
Organisations running Secure Access servers before 14.61 are exposed. The attacker must hold valid credentials to connect to the server. Sources do not say which deployment modes or default settings are involved, so the rest is unknown.
No product ranges from the sources yet.
14.61 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time.
This page as .md · .json · in your agent: get_signal("CVE-2026-116768")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.