{
  "cveId": "CVE-2026-97718",
  "product": "Absolute Secure Access Server",
  "originalPublishedAt": "2026-11-02T20:00:40.552Z",
  "vendorAdvisoryPublishedAt": "2026-10-29",
  "checkedAt": "2026-11-02T20:43:53Z",
  "scope": {
    "classification": "software",
    "component": "Secure Access Server application on Windows Server",
    "source": "https://www.absolute.com/platform/requirements"
  },
  "ratings": [
    {
      "source": "Absolute",
      "version": "4.0",
      "score": 9.4,
      "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"
    }
  ],
  "affected": "14.60 only",
  "fixedRelease": {
    "version": "14.61",
    "serverBuild": "02797",
    "source": "https://www.absolute.com/platform/security-information/vulnerability-archive/multiple-vulnerabilities-addressed-in-secure-access-14-61-and-insights-for-network-4-51"
  },
  "sourceRecord": {
    "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/97xxx/CVE-2026-97718.json",
    "mirrorUrl": "https://casco.com/cve/CVE-2026-97718/record.json",
    "canonicalSha256": "e8dddb348d0741afdb226ed9135df4db1f84dae56316c082ca1373ab853b67d4",
    "mirrorSha256": "da1e4f3267471984510a23d0762a150ff22e39234e506ebdfdc4b06df5b3e059"
  },
  "upgradeSourceDocuments": [
    {
      "url": "https://help-sa.absolute.com/support/docs/SecureAccess/1460/help/Secure%20Access%20Server/setup.03.058.html",
      "sha256": "ef2e38e46992c1a91aa9236c1436cd747437f595c0f3650a03238ef0f856fd06"
    },
    {
      "url": "https://help-sa.absolute.com/support/docs/SecureAccess/1460/help/Secure%20Access%20Server/setup.03.063.html",
      "sha256": "b1c96e8563c539c83e64c526386ae47a02d038a08a6f30714bc3e7ff310fd924"
    },
    {
      "url": "https://help-sa.absolute.com/support/docs/SecureAccess/1460/help/Secure%20Access%20Server/setup.03.069.html",
      "sha256": "66a3e063b1b9eb956bc3de074401ce628f2cd8882cf3eb0406e08d87abf989b8"
    },
    {
      "url": "https://help-sa.absolute.com/support/docs/SecureAccess/1460/help/Secure%20Access%20Server/setup.03.070.html",
      "sha256": "175fba1ead074f66f5c07a79837e908f8a8347e479ef78d3ef6c153b5a0e84d9"
    },
    {
      "url": "https://help-sa.absolute.com/support/docs/SecureAccess/1460/help/Secure%20Access%20Server/setup.03.071.html",
      "sha256": "8fd64c33bbd036c20908755f7a1a75dd0668882908a3cff31374a1e7bb891583"
    },
    {
      "url": "https://help-sa.absolute.com/support/docs/SecureAccess/1460/help/Secure%20Access%20Server/setup.03.072.html",
      "sha256": "8252a99e78ee3c87d40b54ae458c9b669b15b465746d4c8c389ae5611f4c0fc5"
    },
    {
      "url": "https://help-sa.absolute.com/support/docs/SecureAccess/1460/help/Secure%20Access%20Server/setup.03.073.html",
      "sha256": "06d03a04ba4847f1e06fc624be932e02e2c25966c05809dbb37cf735e018a3a4"
    },
    {
      "url": "https://help-sa.absolute.com/support/docs/SecureAccess/1460/help/Secure%20Access%20Server/setup.03.074.html",
      "sha256": "a401b7a400c2d52a1139b4cfa21eb2ef183b7ffbf218df4765105eafdb91427b"
    },
    {
      "url": "https://help-sa.absolute.com/support/docs/SecureAccess/1460/help/Secure%20Access%20Server/setup.03.077.html",
      "sha256": "81ebe4637df51898a8f48b1cff12d624c3c8b9ca30a047202f81bc6683ebb169"
    },
    {
      "url": "https://help-sa.absolute.com/support/docs/SecureAccess/1460/help/Secure%20Access%20Server/manage.07.031.html",
      "sha256": "2dc86df62c61b39c144febc9c7afddc25b89e724b7940a4e55641014604846be"
    }
  ],
  "releaseHistory": {
    "url": "https://help-sa.absolute.com/support/docs/SecureAccess/1460/docs/known_issues.htm",
    "sha256": "9726520e4d3f59c8bbc0a6dbc69513130e27fabec2f2d356915a88fbefbfb842"
  },
  "validation": {
    "fumadocs": "13.0.1 generation passed",
    "id": "CVE-2026-97718",
    "slug": "cve-2026-97718-secure-access",
    "draft": false,
    "tableCount": 2,
    "headingCount": 5,
    "articleSha256": "c9be776be981f5ddd06d60ab10de8d3f1df89f9891019ea9fb2a98a99003723b",
    "og": {
      "width": 1200,
      "height": 630,
      "bytes": 47176,
      "sha256": "c8d9960d1fd18267f68718ddb42beb63dbecedd8c1354c5936bdb6617e4c4e99",
      "logoSource": "public/logo-wide.svg",
      "logoSha256": "bf017569e85013679bc0720c4674f2edc9d03627422609b674ef1e6519abd00f"
    },
    "render": "standalone GFM HTML",
    "productRuntimeTests": "not run",
    "externalLinksChecked": 13,
    "externalLinkFailures": [],
    "imageVisuallyInspected": true
  },
  "runtimeVerification": {
    "executed": false,
    "reason": "Proprietary Windows Server software; no vendor executable/regression suite or Windows runtime was executed.",
    "tests": []
  },
  "limitations": [
    "No full Secure Access deployment, migration or failover test.",
    "No vulnerability reproduction or negative endpoint test.",
    "No full repository Sandbox build; standalone content rendering only."
  ],
  "publicDiscussionResearch": {
    "observedAt": "2026-11-02T20:43:53Z",
    "platforms": [
      "Hacker News",
      "Reddit",
      "LinkedIn",
      "X/Twitter",
      "GitHub",
      "vendor/operator forums"
    ],
    "verifiedThreads": []
  }
}