Executive Summary

CVE-2026-40949 is a buffer overflow vulnerability found in the Secure Access Windows client versions prior to 14.50. This vulnerability can be exploited by attackers who have local control over the Windows client.

By triggering this buffer overflow, an attacker can cause the application to crash or behave unexpectedly, leading to a denial of service condition.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by allowing an attacker with local access to the Windows client to cause a denial of service. This means the Secure Access client could become unavailable or stop functioning properly, potentially disrupting your network access or security services.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, update the Secure Access Windows client to version 14.50 or later, as the vulnerability affects versions prior to 14.50.

Since the vulnerability requires local attacker control, restricting local access to trusted users and systems can also help reduce risk.

Useful 0 Not Useful 0