CVE-2026-40958
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
CVE-2026-40958 is an input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.
Risk Assessment
The risk is that a privileged attacker can trigger a DoS attack, potentially disrupting the Secure Access client and affecting service availability.
Recommendation
It is recommended to upgrade Secure Access clients to version 14.55 or later, which includes a fix for the input validation error.
Original NVD description (English source)
CVE-2026-40958 is a input validation error in Secure Access clients prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against their client.