CVE-2026-0517 MEDIUM

CVE-2026-0517: Denial of Service in Secure Access Servers Prior to 14.20.

Vendor Absolute Security
Product Secure Access
Published January 17, 2026
Last update January 20, 2026
View on NVD All CVEs

CVSS base score

6.0/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

CVE-2026-0517 is a denial-of-service vulnerability in versions of Secure Access Server prior to 14.20. An attacker can send a specially crafted packet to a server and cause the server to crash

Key dates

02Disclosure timeline

January 17, 2026 CVE published
January 20, 2026 Record updated