CVE-2026-97714
waiting for further signalsZero needs more public information before it can validate it.GHSA-x6hf-62r6-phf3 ↗EUVD-2026-94583 ↗
description
Secure Access versions before 14.60 are affected by an authentication-handling flaw. An attacker who can supply a malformed response during authentication may cause the service to remain unavailable.
mitigation
Upgrade Secure Access to version 14.60 or later.
fixed in 14.60
outcome
Contextual: an exploit technique exists, but no deterministic check could cover this one.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-07 19:20Zcve_org: trigger signal, started the run
this entry in the feed
GET /api/v1/feed/CVE-2026-97714
{ "etk_id": "ETK-2026-919", "cve_id": "CVE-2026-97714", "display_id": "CVE-2026-97714", "ghsa_id": "GHSA-x6hf-62r6-phf3", "euvd_id": "EUVD-2026-94583", "status": "published", "anchor_state": "anchored", "title": "Authentication response denial of service in Secure Access", "summary": "Secure Access versions before 14.60 are affected by an authentication-handling flaw. An attacker who can supply a malformed response during authentication may cause the service to remain unavailable.", "mitigation": "Upgrade Secure Access to version 14.60 or later.", "vendor": "Absolute Security", "product": "Secure Access", "affected": [ { "affected_notes": [], "affected_ranges": [ ">= 0, < 14.60" ], "ecosystem": null, "fixed_versions": [ "14.60" ], "package_name": "Secure Access", "purl": null } ], "cwes": null, "cvss_score": 8.2, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N", "epss_score": 0.0025, "epss_percentile": 0.1572, "epss_asof": "2026-10-20", "automation": "contextual", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 10.83930175, "t0_at": "2026-10-07T19:20:14.565000+00:00", "signals": { "trigger_signal": { "at": "2026-10-07T19:20:14.565000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-07T19:20:14.565000+00:00", "url": "https://www.cve.org/CVERecord?id=CVE-2026-97714" } } }
published 2026-10-08 00:48Z
last change 2026-10-21 18:49Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.