CVE-2026-97715

Awaiting Analysis Awaiting Analysis - Queue

BaseFortify

Publication date: 2026-10-07

Last updated on: 2026-10-08

Assigner: NetMotion Software

Description

CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-07

Last Modified

2026-10-08

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-97715

EUVD

EUVD-2026-94580

Affected Vendors & Products

Vendor	Product	Version / Range
Absolute	Security	Secure Access 0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

CVE-2026-97715 is a vulnerability in Secure Access servers before version 14.60 where authenticated attackers can send malformed data during client registration to cause a persistent denial of service.

Detection Guidance

To detect CVE-2026-97715, monitor Secure Access server logs for repeated client registration failures or malformed data submissions. Check for persistent DoS conditions where the server remains unresponsive. Verify server version is below 14.60. Use network traffic analysis tools to identify unusual client registration patterns.

Impact Analysis

This vulnerability can disrupt service availability by causing a persistent denial of service, making systems unavailable to users.

Compliance Impact

This vulnerability primarily impacts service availability by causing persistent denial of service through malformed client registration data. While it does not directly affect confidentiality or integrity, prolonged service disruption could lead to non-compliance with availability requirements in standards like GDPR (Article 32) and HIPAA (Security Rule). Organizations relying on affected Secure Access servers may face compliance violations if service outages impact data processing or access.

Mitigation Strategies

Upgrade Secure Access servers to version 14.60 or later to address the client registration flaw that enables persistent DoS attacks.

Hi! I’m here to help you understand CVE-2026-97715. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70