CVE-2026-116769
📛 CVE Title
Authentication bypass in Secure Access Servers
Description
CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to 14.61. Attackers can modify security settings of a client via the server.
Overview
- State
- PUBLISHED
- Assigner (CNA)
- Absolute
- CVSS severity
- CRITICAL
- CVSS score
- 9.3 / 10
- CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N- Effective score
- 9.3 / 10 CRITICAL source: CNA overview
- CWE(s)
- —
- Reserved
- 2026-10-26
- Published
- 2026-11-02 20:06 UTC
- Last updated
- 2026-11-02 20:06 UTC
- Source
- https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/116xxx/CVE-2026-116769.json
- Linked Threat
- CVE-2026-116769 — Authentication bypass in Secure Access Servers
European Union Vulnerability Database ENISA EUVD
ENISA's official EU repository for curated vulnerability intelligence. Carries a separate identifier (EUVD-YYYY-NNNN) and frequently exposes an earlier-published description + CVSS than NVD does.
- EUVD ID
-
EUVD-2026-115456
EUVD enrichment is queued; refresh the page in a few seconds.
Affected products (1)
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Absolute Security | Secure Access |
13.0 (affected)
|
— |
Vendor references (1)
References embedded in the original CVE record by the assigning CNA.
MITRE references (1) cveawg.mitre.org
Pulled from MITRE's CVE Services API by the 🛰 Backfill from MITRE button.
Web references (0)
DuckDuckGo results ranked by threat-intel / vendor advisory domains. Generated by the 🔎 Find references (web) button above — same flow as the Remediations search.
No web references attached yet.
Remediations (14)
Remediations are stored against the linked Threat row; the list below is deduplicated across both pages.
-
web:www.aikido.dev
None of these is a clean fix , which is why the decision on how to remediate depends on knowing what package versions are running in production and why. This post will cover how AI has accelerated CVE detection and discovery, the upgrade trap, what CVE remediation actually involves in 2026 , and how to solve the CVE remediation problem.
2026-11-03 11:21 UTC -
web:ctiwatch.com
CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to 14.61. Attackers can modify security settings of a client via the server.
2026-11-03 11:21 UTC -
web:www.oracle.com
Prior Critical Patch Update and Critical Security Patch Update advisories should be reviewed for information regarding earlier published security patches. Refer to Critical Patch Updates, Critical Security Patch Updates, Security Alerts and Bulletins for information about Oracle Security advisories.
2026-11-03 11:21 UTC -
web:vulners.com
CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers affecting versions 13.0 and prior to 14.61 . The flaw allows an attacker to modify the security settings of a client through the server.
2026-11-03 11:21 UTC -
web:nvd.nist.gov
Search Please make use of the interactive search interfaces to find information in the database!
2026-11-03 10:55 UTC -
web:radar.offseq.com
CVE-2026-116769 is a critical authentication bypass vulnerability affecting Absolute Security's Secure Access servers from version 13.0 up to but not including 14.61.
2026-11-03 10:55 UTC -
web:sec.cloudapps.cisco.com
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. These vulnerabilities were found during internal testing and are not known to be actively exploited. To assist customers in patching ...
2026-11-03 10:55 UTC -
web:senserva.com
Every Microsoft security patch (KB) and the CVEs it fixes, with severity, CVSS, and CISA KEV status. Cross-linked to the CVE reference.
2026-11-03 10:55 UTC -
web:www.cvefind.com
Full details for CVE-2026-116769 : technical description, impact, CVSS/EPSS scores, linked CWE, CAPEC, affected CPEs, disclosure date, and mitigation options.
2026-11-03 10:55 UTC -
web:app.opencve.io
Remediation No solution or workaround provided in the CVE record. OpenCVE Recommended Actions Install the Microsoft security update released for CVE‑2026‑69676 on all affected Windows 10, 11, and Windows Server machines. Apply any additional cumulative updates that address Kerberos or authentication functions to reinforce the fix .
2026-11-03 10:55 UTC -
web:www.rapid7.com
CVE-2026-116769 : Absolute Security Secure Access: CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior…. View severity, references, and remediation details from Rapid7.
2026-11-03 10:55 UTC -
web:cvedatabase.com
Search and analyze CVE vulnerabilities with instant access to CVSS scores, affected products, and remediation guidance.
2026-11-03 10:55 UTC -
web:cvefeed.io
CVE-2026-116769 is an authentication bypass vulnerability in Secure Access servers starting with version 13.0 and prior to 14.61. Attackers can modify security settings of a client via the server.
2026-11-03 10:55 UTC -
web:cvetodo.com
CVE-2026-116769 is an Authentication Bypass vulnerability in Absolute Security Secure Access. See exploitation status, patch guidance, and technical details.
2026-11-03 10:55 UTC
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.
Raw JSON
The full cvelistV5 record. Download as CVE-2026-116769.json.
{
"containers": {
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Secure Access",
"vendor": "Absolute Security",
"versions": [
{
"lessThan": "14.61",
"status": "affected",
"version": "13.0",
"versionType": "Server"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "<p>CVE-2026-116769 is an authentication bypass\nvulnerability in Secure Access servers starting with version 13.0 and prior to\n14.61. Attackers can modify security settings of a client via the server. </p>"
}
],
"value": "CVE-2026-116769 is an authentication bypass\nvulnerability in Secure Access servers starting with version 13.0 and prior to\n14.61. Attackers can modify security settings of a client via the server."
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "HIGH",
"subIntegrityImpact": "HIGH",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "HIGH",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-11-02T20:06:19.670Z",
"orgId": "b6533044-ea05-4482-8458-7bddeca0d079",
"shortName": "Absolute"
},
"references": [
{
"url": "https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-116769"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Authentication bypass in Secure Access Servers",
"x_generator": {
"engine": "Vulnogram 1.0.5"
}
}
},
"cveMetadata": {
"assignerOrgId": "b6533044-ea05-4482-8458-7bddeca0d079",
"assignerShortName": "Absolute",
"cveId": "CVE-2026-116769",
"datePublished": "2026-11-02T20:06:19.670Z",
"dateReserved": "2026-10-26T21:43:51.547Z",
"dateUpdated": "2026-11-02T20:06:19.670Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}