CVE-2026-55398

Analyzed Analyzed - Analysis Complete

Memory Corruption DoS in NetMotion Secure Access

Publication date: 2026-07-15

Last updated on: 2026-07-16

Assigner: NetMotion Software

Description

CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-15

Last Modified

2026-07-16

Generated

2026-08-05

AI Q&A

2026-07-16

EPSS Evaluated

2026-08-03

NVD

CVE-2026-55398

Affected Vendors & Products

Vendor	Product	Version / Range
absolute	secure_access	to 14.55 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

Executive Summary

CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers before version 14.55. Attackers with detailed knowledge and full control over the tunnel protocol can exploit it to cause a non-persistent denial of service against the server.

Detection Guidance

Detection requires monitoring for unusual memory usage patterns or server crashes in Secure Access clients/servers prior to version 14.55. Check server logs for non-persistent DoS events and inspect memory dumps for protocol anomalies. No specific commands are provided in the available context.

Impact Analysis

This vulnerability allows attackers to disrupt server operations by triggering a temporary denial of service. This could lead to service interruptions, reduced performance, or downtime for users relying on Secure Access services.

Compliance Impact

This vulnerability does not directly impact compliance with GDPR, HIPAA, or similar standards as it only causes a non-persistent DoS against the server. No data exposure or persistent compromise is indicated.

Mitigation Strategies

Update Secure Access clients and servers to version 14.55 or later to address the memory management vulnerability.

Hi! I’m here to help you understand CVE-2026-55398. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70