BaseFortify

Publication date: 2026-01-17

Last updated on: 2026-02-02

Assigner: NetMotion Software

Description

CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with administrative privileges can interfere with another administrator’s use of the console.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-17

Last Modified

2026-02-02

Generated

2026-07-06

AI Q&A

2026-01-18

EPSS Evaluated

2026-07-05

NVD

CVE-2026-0518

Affected Vendors & Products

Vendor	Product	Version / Range
absolute_software	secure_access	to 14.20 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

CVE-2026-0518 is a cross-site scripting (XSS) vulnerability in versions of Absolute Software's Secure Access product prior to version 14.20. It allows an attacker who already has administrative privileges to interfere with another administrator's use of the management console. [1]

Impact Analysis

This vulnerability can impact you by allowing an attacker with administrative privileges to disrupt the integrity and availability of the management console for other administrators. It does not affect confidentiality or security scope but can cause limited degradation in integrity and availability. [1]

Mitigation Strategies

To mitigate this vulnerability, you should upgrade Secure Access to version 14.20 or later, as the issue is resolved in these versions. [1]

Hi! I’m here to help you understand CVE-2026-0518. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70