CVE-2026-40956: Memory disclosure in Secure Access Clients

Q: What is the severity of CVE-2026-40956?

CVE-2026-40956 has a severity rating of 10, indicating critical risk.

Q: How do I fix CVE-2026-40956?

To remediate CVE-2026-40956, upgrade to the Secure Access client version 14.55 or later.

Q: What type of vulnerability is CVE-2026-40956?

CVE-2026-40956 is a memory disclosure vulnerability affecting Secure Access clients.

Q: Who is affected by CVE-2026-40956?

CVE-2026-40956 affects users of Secure Access client versions prior to 14.55.

Q: Can CVE-2026-40956 be exploited remotely?

Yes, CVE-2026-40956 can be exploited by attackers who have full control over the tunnel protocol.

Published Jul 15, 2026

Updated

CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.

Affected Software

2 affected components

Secure Access client<14.55

Absolute Secure Access<14.55

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Secure Access client to a version that resolves this vulnerability.
Fixed in 14.55Patch CVE-2026-40956

Event History

Jul 15, 2026

CVE Published

via MITRE·07:55 PM

Data Sourced

via MITRE·07:55 PM

Description

Data Sourced

via NVD·08:17 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2026-40956?

CVE-2026-40956 has a severity rating of 10, indicating critical risk.

How do I fix CVE-2026-40956?

To remediate CVE-2026-40956, upgrade to the Secure Access client version 14.55 or later.

What type of vulnerability is CVE-2026-40956?

CVE-2026-40956 is a memory disclosure vulnerability affecting Secure Access clients.

Who is affected by CVE-2026-40956?