CVE-2026-40956
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.
Risk Assessment
The risk involves potential exposure of sensitive data stored in memory, which could lead to a breach of information confidentiality within the organization.
Recommendation
It is recommended to immediately upgrade the Secure Access client to version 14.55 or later to eliminate the memory disclosure vulnerability.
Original NVD description (English source)
CVE-2026-40956 is a memory disclosure vulnerability in Secure Access client versions prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can cause a small amount of random memory to leak.