CVE-2026-33446
CriticalSummary
CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to version 14.50. Attackers controlling a modified server can send a special packet that can overwrite a small portion of memory, potentially leading to memory corruption or denial of service.
Risk Assessment
The risk to the organization involves potential memory corruption or denial of service, which could affect system availability.
Recommendation
It is recommended to update the Secure Access client to version 14.50 or later to mitigate this vulnerability.
Other vulnerabilities in Secure Access client
See all- CVE-2026-33449High
CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to version 14.50. Attackers can send a modified message to the client, potentially leading to memory overwrite and denial of service.
- CVE-2026-33447Critical
CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to version 14.50. Attackers controlling a modified server can send a special packet that can overwrite a small portion of memory, potentially leading to memory corruption or denial of service.
Original NVD description (English source)
CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a special packet that can overwrite a small portion of memory conceivably leading to memory corruption or a denial of service.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS