CVE-2026-55398

LowCVSS 3.7

Published: 15/07/2026(UTC)Updated: 16/07/2026(UTC)Translated: 17/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

17th percentile - higher than 17% of all known CVEs

Summary

A memory management vulnerability in Secure Access clients and servers prior to version 14.55 allows attackers with intimate knowledge and full control over the tunnel protocol to perform a non-persistent DoS against the server.

Risk Assessment

An attacker can temporarily disrupt the Secure Access server, causing service outages for all users relying on network access.

Recommendation

Immediately update all Secure Access clients and servers to version 14.55 or later.

Original NVD description (English source)

CVE-2026-55398 is a memory management vulnerability in Secure Access clients and servers prior to 14.55. Attackers with intimate knowledge of and total control over the tunnel protocol can create a non-persistent DoS against the server.