{"basis":"claimed","id":"CVE-2026-116768","name":"Missing length validation in Absolute Secure Access","vendorProject":"Absolute Software","product":"Secure Access","publishedAt":"2026-11-02","cvss":{"score":7.1,"severity":"HIGH","version":"4.0"},"exploited":null,"epss":null,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":"Missing length validation in Absolute Secure Access","description":"CVE-2026-116768 is a missing length validation vulnerability\nin Secure Access servers prior to 14.61. Authenticated attackers can cause a\npersistent denial of service when connecting for the first time.","cwes":[],"vendors":[{"vendor":"cloudflare","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-02T23:05:12.442Z","cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial"},"measured":[],"social":{"total":2,"first_seen":"2026-11-02T23:04:10.492Z","daily":[{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":2},{"day":"2026-11-03","posts":0}],"top_posts":[{"source":"bluesky","kind":"post","url":"https://bsky.app/profile/euvd-bot.bsky.social/post/3mzegoz23ud2q","author":"euvd-bot.bsky.social","author_name":"EUVD Bot","avatar_url":"https://cdn.bsky.app/img/avatar/plain/did:plc:gg2zgjclkvcuj5hkhdnd4lnf/bafkreieh6lg5jwsh6vu2mtlucifmtlku5bni4tapkrdf2xyri5wc5qtzhm","text":"🚨 EUVD-2026-115626\n📊 7.1/10\n🏢 Absolute Software\n\n📝 CVE-2026-116768 is a missing length validation vulnerability\nin Secure Access servers prior to 14.61. Authenticated attackers can cause a\npers...\n\n🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115626\n\n#cybersecurit…","engagement":0,"posted_at":"2026-11-02T23:04:10.699Z"},{"source":"mastodon","kind":"post","url":"https://mastodon.social/@EUVD_Bot/117549344390103725","author":"EUVD_Bot","author_name":"EUVD Bot","avatar_url":"https://files.mastodon.social/accounts/avatars/115/742/177/658/551/532/original/fa0a678dd7f16fa8.png","text":"🚨 EUVD-2026-115626 📊 Score: 7.1/10 (CVSS v3.1) 📦 Product: Secure Access 🏢 Vendor: Absolute Software 📅 Updated: 2026-11-02 📝 CVE-2026-116768 is a missing length validation vulnerability in Secure Access servers prior to 14.61. Authenticated attackers can cause a persistent…","engagement":0,"posted_at":"2026-11-02T23:04:10.492Z"}],"exploit_repositories":[]}}