{"affected":[{"defaultStatus":"unaffected","product":"Secure Access","source":"CNA: Absolute","vendor":"Absolute Software","versions":[{"lessThan":"14.61","status":"affected","version":"0","versionType":"server"}]}],"cveId":"CVE-2026-116768","cwes":["CWE-20"],"description":"CVE-2026-116768 is a missing length validation vulnerability\nin Secure Access servers prior to 14.61. Authenticated attackers can cause a\npersistent denial of service when connecting for the first time.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.1,"severity":"high","source":"CNA: Absolute","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1793654495467,"publishedAt":1793651271649,"references":[{"source":"CNA: Absolute","tags":[],"url":"https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-116768"}],"remediation":[],"revision":"12ab6fbb427fd1a24dd77318b3c9e977fbfe124d2d9cd04579198f21b772b630","sources":[{"modifiedAt":1793654495467,"name":"CNA: Absolute","retrievedAt":1793657321425,"url":"https://www.cve.org/CVERecord?id=CVE-2026-116768"}],"ssvc":{"assessedAt":1793654492394,"automatable":"no","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Missing length validation in Absolute Secure Access","updatedAt":1793657321425}