CVE-2026-40955
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.
Risk Assessment
The risk involves potential DoS attacks on Secure Access clients, which can disrupt user operations and impact network service availability.
Recommendation
It is recommended to immediately upgrade Secure Access clients to version 14.55 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
CVE-2026-40955 is an integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.