CVE-2026-0518

4.8 mediumEPSS 0.2%

Medium (4.8) in absolute secure access. EPSS 0.2% chance of exploitation in the next 30 days.

CVE-2026-0518 is a cross-site scripting vulnerability in versions of Secure Access prior to 14.20. An attacker with administrative privileges can interfere with another administrator’s use of the console.

Severity

CVSS 4.0

4.8 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-11-01)
CWE: CWE-79
Published: 2026-01-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

absolute:secure_access

References

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-0518

Check your stack JSON