CVE-2026-97714
Received Received - Intake

Authentication Bypass in Secure Access Server

Publication date: 2026-10-07

Last updated on: 2026-10-07

Assigner: NetMotion Software

Description
CVE-2026-97714 is a is a vulnerability in the authentication sub-system of Secure Access servers prior to version 14.60. Attackers can send a malformed response during authentication and cause a persistent denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-07
Last Modified
2026-10-07
Generated
2026-10-08
AI Q&A
2026-10-07
EPSS Evaluated
N/A
NVD
CVE-2026-97714
EUVD
EUVD-2026-94583

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Absolute Security Secure Access 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-400 The product does not properly control the allocation and maintenance of a limited resource.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-97714 is a high-severity vulnerability in the authentication subsystem of Secure Access servers running versions before 14.60. Attackers can send a malformed response during authentication, causing a persistent denial-of-service condition where the server remains unavailable until manually fixed.

Impact Analysis

This vulnerability can disrupt critical services that rely on Secure Access servers by making them unavailable. Since it doesn't require user interaction or special privileges, it can be exploited remotely over a network, potentially affecting organizations using vulnerable versions.

Mitigation Strategies

Update Secure Access servers to version 14.60 or later to address the vulnerability in the authentication subsystem.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97714. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart