CSRF in Secure Access Server v14.60

Summary

CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control.

Remediation

1. Inventory every Absolute Security Secure Access deployment, including staging.
2. No fixed version appears in the public sources yet. Check the references below and the vendor directly.

References

• Referencehttps://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-97718