CVE-2026-97718

CVSS 9.4 (critical) · published 2026-11-02

CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server.  Because of a bypassed security control, an attacker can cause an admin to create an account under their control.

Weakness: CWE-352

Source: NVD CVE-2026-97718

References

• https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-97718

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.