CVE-2026-55401

CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57. Attackers can send an unauthenticated packet to a Secure Access server with load balancing enabled, which results in the internal load balancer crashing. After a successful attack, the Secure Access server is still able to accept connections and is still able to issue a failover to connected clients. ‍ https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L

• CWE-476

• https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-55401Vendor Advisory

Published

Aug 13, 2026

Last Modified

Sep 4, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-55391datamodel-code-generator generates Pydantic v2 models, datac…7.5
• CVE-2026-55392NILFS utilities through 2.3.0, fixed in commit 26efb5d, nilf…6.7
• CVE-2026-55398CVE-2026-55398 is a memory management vulnerability in Secur…3.7
• CVE-2026-55399CVE-2026-55399 is a resource exhaustion vulnerability in the…4.3
• CVE-2026-5540A vulnerability has been found in code-projects Simple Laund…7.3
• CVE-2026-55400CVE-2026-55400 is an integer underflow in Secure Access serv…6.5
• CVE-2026-55402CVE-2026-55402 is an out of bounds read vulnerability in Sec…5.9
• CVE-2026-55403datamodel-code-generator generates Python data models from s…3.7
• CVE-2026-55404yt-dlp and youtube-dl are command-line audio/video downloade…8.8
• CVE-2026-55405LangChain4j is a Java library for building LLM-powered appli…7.6
• CVE-2026-55406Buffa is a pure-Rust Protocol Buffers implementation with fi…5.9
• CVE-2026-55407Buffa is a pure-Rust Protocol Buffers implementation with fi…6.3