CVE-2026-11459
LowCVSS 3.3Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A vulnerability in SecureAge CatchPulse up to version 10.9.3. An unknown function in the saappctl.sys library (IOCTL Handler component) leads to information disclosure. Requires local access. The exploit has been publicly disclosed.
Risk Assessment
An attacker could gain access to sensitive system information, which may aid in further attacks.
Recommendation
It is recommended to update SecureAge CatchPulse to the latest version or apply temporary mitigations such as restricting access to the driver.
Original NVD description (English source)
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used.