CVE-2026-33444
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
A memory management vulnerability in Secure Access servers prior to version 14.55. Attackers with intimate knowledge and full control over the tunnel protocol can cause a non-persistent denial of service (DoS) against the server.
Risk Assessment
The risk involves a potential temporary disruption of the Secure Access server by an attacker, which may block legitimate users from accessing protected network resources.
Recommendation
It is recommended to immediately upgrade Secure Access servers to version 14.55 or later, which includes a fix for this vulnerability.
Original NVD description (English source)
CVE-2026-33444 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server.