CVE-2026-33449

High

Description

CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographically valid message to the client, overwriting a small portion of memory conceivably leading to a denial of service.

SeverityHigh
CVSS7.5
Exploit probability—
ProductAbsolute Secure Access
PublishedApr 30, 2026
First seenApr 30, 2026
Weakness typeCWE-121CWE-121

How to fix

Update
  • absolute secure_access14.50 or later

Affected products

ProductAffected versionsFixed in
absolute secure_accessv < 14.5014.50

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.