Persistent Denial of Service in Secure Access Server

Executive Summary

CVE-2026-97717 is a medium-severity vulnerability in the proxy sub-system of Secure Access servers running versions prior to 14.60. Authenticated attackers can exploit this flaw by sending malformed data to the server, causing a persistent denial of service (DoS) condition. This disrupts server availability for legitimate users without requiring additional user interaction beyond initial authentication.

Useful 0 Not Useful 0

Detection Guidance

Monitor server logs for unusual activity or repeated failed connection attempts from authenticated users. Check for persistent service disruptions in Secure Access servers running versions prior to 14.60.

Useful 0 Not Useful 0

Impact Analysis

If you use Secure Access servers prior to version 14.60, an attacker with valid credentials could exploit this vulnerability to make the server unavailable. This would prevent you and other users from accessing the server's services, leading to downtime and potential loss of productivity.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade Secure Access servers to version 14.60 or later to address the vulnerability. Ensure all authenticated users follow secure practices to prevent exploitation.

Useful 0 Not Useful 0