CVE-2026-0518
BaseFortify
Publication date: 2026-01-17
Last updated on: 2026-02-02
Assigner: NetMotion Software
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| absolute_software | secure_access | to 14.20 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-0518 is a cross-site scripting (XSS) vulnerability in versions of Absolute Software's Secure Access product prior to version 14.20. It allows an attacker who already has administrative privileges to interfere with another administrator's use of the management console. [1]
How can this vulnerability impact me? :
This vulnerability can impact you by allowing an attacker with administrative privileges to disrupt the integrity and availability of the management console for other administrators. It does not affect confidentiality or security scope but can cause limited degradation in integrity and availability. [1]
What immediate steps should I take to mitigate this vulnerability?
To mitigate this vulnerability, you should upgrade Secure Access to version 14.20 or later, as the issue is resolved in these versions. [1]