CVE-2026-116769
CriticalCVSS 9.3Summary
CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to 14.61. Attackers can modify security settings of a client via the server.
Risk Assessment
Authentication bypass allows unauthorized individuals to alter client security settings, potentially weakening the overall environment protection and exposing the organization to further attacks.
Recommendation
Update Secure Access servers to version 14.61 or later. Review logs for unauthorized changes to client settings.
Other vulnerabilities in Secure Access server
See all- CVE-2026-97718Critical
CVE-2026-97718 is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control.
- CVE-2026-40957High
CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site could use it to potentially steal credentials from an unwary administrator.
Original NVD description (English source)
CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to 14.61. Attackers can modify security settings of a client via the server.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS