CVE-2026-33445
Analyzed Analyzed - Analysis Complete

Memory Corruption DoS in NetMotion Secure Access

Vulnerability report for CVE-2026-33445, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-07-15

Last updated on: 2026-07-16

Assigner: NetMotion Software

Description

CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-15
Last Modified
2026-07-16
Generated
2026-08-05
AI Q&A
2026-07-16
EPSS Evaluated
2026-08-03
NVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
absolute secure_access to 14.55 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-33445 is a memory management vulnerability in Secure Access servers running versions prior to 14.55. Attackers with detailed knowledge and full control over the tunnel protocol can exploit this to cause a persistent denial of service (DoS) against the server.

Detection Guidance

This vulnerability requires intimate knowledge of and total control over the tunnel protocol to exploit, making detection challenging. Monitor for unusual memory usage patterns or server crashes in Secure Access servers prior to version 14.55. Check server logs for persistent denial-of-service events or protocol anomalies.

Impact Analysis

This vulnerability allows attackers to disrupt server availability by causing a persistent DoS, potentially leading to downtime for services relying on Secure Access servers.

Compliance Impact

This vulnerability does not directly impact compliance with GDPR, HIPAA, or similar standards as it is a technical DoS issue in Secure Access servers. However, persistent DoS attacks could disrupt services handling sensitive data, indirectly affecting availability requirements under these regulations.

Mitigation Strategies

Upgrade Secure Access servers to version 14.55 or later to address the memory management vulnerability. Ensure only authorized users have control over tunnel protocols to prevent persistent DoS attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-33445. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart