CVE-2026-97718

CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access…

Risk score: 61/100
CVSS: 9.4 v4.0
Published: 2 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is: CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Amber

CVSS 9.4 critical
Remotely exploitable without logging in

References

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-97718

Original description

CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control.

Last activity 2 Nov 2026. Patch Forecast updates every hour.