CVE-2026-40956

Modified Modified - Updated After Analysis

Memory Disclosure in Secure Access Client

Publication date: 2026-07-15

Last updated on: 2026-07-16

Assigner: NetMotion Software

Description

CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-16

Generated

2026-08-05

AI Q&A

2026-07-16

EPSS Evaluated

2026-08-03

NVD

CVE-2026-40956

Affected Vendors & Products

Vendor	Product	Version / Range
absolute	secure_access	to 14.55 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions before 14.55. Attackers with full control over the tunnel protocol can cause random memory to leak, potentially exposing sensitive information.

Detection Guidance

Detection involves checking the version of the Secure Access client installed on your system. Compare the installed version against 14.55. If the version is prior to 14.55, the system is vulnerable. Use commands like 'netmotion --version' or check installed programs via system tools.

Impact Analysis

This vulnerability may expose small amounts of random memory, which could include sensitive data like credentials or configuration details. However, the risk is low due to limited attacker capabilities and low CVSS scores.

Compliance Impact

The vulnerability could pose compliance risks if exposed memory contains regulated data like personal or health information. Organizations must assess potential data exposure and implement mitigations to maintain compliance.

Mitigation Strategies

Immediately update the Secure Access client to version 14.55 or later. Ensure all systems running affected versions are patched. Monitor network traffic for unusual activity related to tunnel protocol interactions.

Hi! I’m here to help you understand CVE-2026-40956. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70