{"basis":"claimed","id":"CVE-2026-97718","name":"CSRF in Secure Access Server v14.60","vendorProject":"Absolute Security","product":"Secure Access","publishedAt":"2026-11-02","cvss":{"score":9.4,"severity":"CRITICAL","version":"4.0"},"exploited":null,"epss":null,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":"CSRF in Secure Access Server v14.60","description":"CVE-2026-97718 Is a cross-site request forgery vulnerability\nin version 14.60 of the Secure Access server.  Because of a bypassed security control, an\nattacker can cause an admin to create an account under their control.","cwes":[],"vendors":[{"vendor":"cloudflare","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-02T21:19:59.290Z","cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","ssvc":null,"measured":[],"social":{"total":6,"first_seen":"2026-11-02T20:25:41.000Z","daily":[{"day":"2026-10-20","posts":0},{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":6}],"top_posts":[{"source":"x","kind":"post","url":"https://x.com/EnclaveRadar/status/2117397758487257197","author":"EnclaveRadar","author_name":"Enclave Radar","avatar_url":"https://pbs.twimg.com/profile_images/2116963272138121217/F3O3nWOo_bigger.jpg","text":"🆕 New CVE: CVE-2026-97718 (CVSS 9.4)\nCSRF in Secure Access Server v14.60\nRemote, no login needed.\n\nCVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server.\n\nhttps://t.co/oN65rFXanL","engagement":0,"posted_at":"2026-11-02T23:25:39.000Z"},{"source":"bluesky","kind":"post","url":"https://bsky.app/profile/stemshop.bsky.social/post/3mzedkelp4h2y","author":"stemshop.bsky.social","author_name":"stemshop.bsky.social","avatar_url":"https://cdn.bsky.app/img/avatar/plain/did:plc:6zpzsab44xavrl46jqvba5wb/bafkreid2zcmne7vr45ck2bkvmhnf4occned3jmavshzk2fh5j5qpbtluja","text":"🚨 CVE-2026-97718 — CVSS 9.4 CRITICAL\n\nCVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. ...\n\n🔎 https://stemshop.top/cve/CVE-2026-97718\n\n#CVE #CyberSecurity #InfoSec","engagement":0,"posted_at":"2026-11-02T22:07:53.000Z"},{"source":"bluesky","kind":"post","url":"https://bsky.app/profile/cve.skyfleet.blue/post/ailc44qxrp3pr","author":"cve.skyfleet.blue","author_name":"CVE Alerts ","avatar_url":"https://cdn.bsky.app/img/avatar/plain/did:plc:myutg2pwkjbukv7pq2hp5mtl/bafkreidzrx72dabuipp2ej2gldupqzv5nbtbez7tv4n26ekzjsot6ocdam","text":"CVE-2026-97718 - CSRF in Secure Access Server v14.60\nCVE ID : CVE-2026-97718\n \n Published : Nov. 2, 2026, 8:18 p.m. | 46 minutes ago\n \n Description : CVE-2026-97718 Is a cross-site request forgery vulnerability\nin version 14.60 of the Secure Access server.  Because of a bypass...","engagement":0,"posted_at":"2026-11-02T21:48:20.206Z"},{"source":"bluesky","kind":"post","url":"https://bsky.app/profile/euvd-bot.bsky.social/post/3mze7t4rbfv26","author":"euvd-bot.bsky.social","author_name":"EUVD Bot","avatar_url":"https://cdn.bsky.app/img/avatar/plain/did:plc:gg2zgjclkvcuj5hkhdnd4lnf/bafkreieh6lg5jwsh6vu2mtlucifmtlku5bni4tapkrdf2xyri5wc5qtzhm","text":"🚨 EUVD-2026-115452\n📊 9.4/10\n🏢 Absolute Security\n\n📝 CVE-2026-97718 Is a cross-site request forgery vulnerability\nin version 14.60 of the Secure Access server.  Because of a bypassed security con...\n\n🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-115452\n\n#cybersecurit…","engagement":0,"posted_at":"2026-11-02T21:01:12.630Z"},{"source":"mastodon","kind":"post","url":"https://mastodon.social/@EUVD_Bot/117548860863416768","author":"EUVD_Bot","author_name":"EUVD Bot","avatar_url":"https://files.mastodon.social/accounts/avatars/115/742/177/658/551/532/original/fa0a678dd7f16fa8.png","text":"🚨 EUVD-2026-115452 📊 Score: 9.4/10 (CVSS v3.1) 📦 Product: Secure Access 🏢 Vendor: Absolute Security 📅 Updated: 2026-11-02 📝 CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an…","engagement":0,"posted_at":"2026-11-02T21:01:12.457Z"},{"source":"x","kind":"post","url":"https://x.com/cvedotnow/status/2117352469080490396","author":"cvedotnow","author_name":"cve.now","avatar_url":"https://pbs.twimg.com/profile_images/2114469817906577408/drWsbSgs_bigger.jpg","text":"🆕 New CVEs\n2 critical CVEs in Absolute Security Secure Access\nWorst: csrf protection bypass in administrator actions (CVE-2026-97718)\nPatch → see advisories\nhttps://t.co/8dpNr0pP0a","engagement":0,"posted_at":"2026-11-02T20:25:41.000Z"}],"exploit_repositories":[]}}