CVE-2026-33449
HighSummary
CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to version 14.50. Attackers can send a modified message to the client, potentially leading to memory overwrite and denial of service.
Risk Assessment
The risk to the organization includes potential denial of service, which can affect system availability. Attackers may exploit this vulnerability to destabilize application performance.
Recommendation
It is recommended to update the Secure Access client to version 14.50 or later to mitigate this vulnerability. Additionally, monitor network traffic for potential attack attempts.
Other vulnerabilities in Secure Access client
See all- CVE-2026-33447Critical
CVE-2026-33447 is a buffer overflow in a message parsing function of the Secure Access client prior to version 14.50. Attackers controlling a modified server can send a special packet that can overwrite a small portion of memory, potentially leading to memory corruption or denial of service.
- CVE-2026-33446Critical
CVE-2026-33446 is a buffer overflow in the authentication sub-system of the Secure Access client prior to version 14.50. Attackers controlling a modified server can send a special packet that can overwrite a small portion of memory, potentially leading to memory corruption or denial of service.
Original NVD description (English source)
CVE-2026-33449 is a buffer overflow in a message handling function of the Secure Access client prior to 14.50. Attackers with control of a modified server can send a cryptographically valid message to the client, overwriting a small portion of memory conceivably leading to a denial of service.