Missing length validation in Absolute Secure Access

Summary

CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent denial of service when connecting for the first time.

Remediation

1. Inventory every Absolute Software Secure Access deployment, including staging.
2. Upgrade Absolute Software Secure Access to 14.61.
3. Confirm the running version after the upgrade.

References

• Referencehttps://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-116768