CVE-2026-33444

Analyzed Analyzed - Analysis Complete

Memory Corruption DoS in NetMotion Secure Access

Publication date: 2026-07-15

Last updated on: 2026-07-16

Assigner: NetMotion Software

Description

CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-16

Generated

2026-08-05

AI Q&A

2026-07-16

EPSS Evaluated

2026-08-03

NVD

CVE-2026-33444

Affected Vendors & Products

Vendor	Product	Version / Range
absolute	secure_access	to 14.55 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

CVE-2026-33444 is a memory management vulnerability in Secure Access servers running versions prior to 14.55. It allows attackers with detailed knowledge of the tunnel protocol to cause a temporary disruption of service by exploiting flaws in memory handling.

Detection Guidance

Detection requires monitoring for unusual memory usage or server crashes in Secure Access servers prior to version 14.55. Check server logs for tunnel protocol anomalies or non-persistent DoS patterns. No specific commands are provided in the available context.

Impact Analysis

This vulnerability could lead to temporary unavailability of Secure Access servers, disrupting network connectivity and remote access services for users and organizations relying on this software.

Compliance Impact

The vulnerability does not directly impact compliance with GDPR or HIPAA as it is a non-persistent DoS attack on Secure Access servers. However, availability disruptions could indirectly affect compliance if they lead to service unavailability or data processing delays.

Mitigation Strategies

Upgrade Secure Access servers to version 14.55 or later to address the memory management vulnerability. Ensure only trusted users have access to tunnel protocol configurations.

Hi! I’m here to help you understand CVE-2026-33444. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70