CVE-2026-40954
LOW3.7CVSS v3
—CVSS v2
0.20%
EPSS (exploit probability)
CWE-191CWE
Description
CVE-2026-40954
is an integer underflow vulnerability in the traffic parsing function of Secure
Access clients prior to 14.55. Attackers with intimate knowledge of and total
control over the tunnel protocol can create a non-persistent DoS against their
client
CVSS v3 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected routers (0)
No routers currently mapped to this CVE in our database.