# CVE-2026-116769

Auth bypass in Secure Access server allows remote modification of client security settings.

- Page: https://www.vulneraibility.com/cve/CVE-2026-116769
- CVSS: 9.3
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.40% (percentile 34.7)
- Published: 2026-11-02

## Affected versions

- Absolute Security Secure Access: affected >= 13.0 and < 14.61

A version outside these ranges is not a statement that it is unaffected.

## Impact

Remote authentication bypass lets attacker modify client security settings via the server, enabling disablement of protections, persistence, or lateral access.

## Action

Immediate action required

## Recommendation

Upgrade Secure Access servers to 14.61+ and isolate/apply compensating controls until patched.

## References

- [other] https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-116769

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.