CVE-2026-15506

HighCVSS 7.8

Published: 12/07/2026(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

A heap-based buffer overflow vulnerability has been found in the saappctl.sys library of the SecureAge CatchPulse driver up to version 10.9.3. The attack requires local access and the exploit has been publicly disclosed.

Risk Assessment

A local attacker could exploit this vulnerability to escalate privileges or cause system instability, posing a risk to the integrity and availability of the IT environment.

Recommendation

Immediately upgrade SecureAge CatchPulse to version 10.10.0 or later, which fixes this vulnerability.

Other vulnerabilities in SecureAge CatchPulse

CVE-2026-11459Low
A vulnerability in SecureAge CatchPulse up to version 10.9.3. An unknown function in the saappctl.sys library (IOCTL Handler component) leads to information disclosure. Requires local access. The exploit has been publicly disclosed.

Original NVD description (English source)

A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 10.10.0 is sufficient to fix this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure.