Ghostwire

CVE-2026-40953: CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55....

MEDIUM CVSS 4.4 Exploit Available

Published: July 15, 2026 | Last Modified: July 16, 2026

Description

CVE-2026-40953 is a heap overflow in the certificate parsing function of Secure Access clients prior to 14.55. Attackers with local access and administrator permissions can create a denial of service attack against the client over which they have control.

Ghostwire Analysis — What This Means Practically

Medium CVSS score indicates moderate risk — exploitation requires specific conditions or results in limited impact.
Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

Affected Products (1)

Unknown — Unknown

References

www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-40
www.tenable.com/cve/CVE-2026-40953
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-40953