CVE-2026-55401
Gravedad CVSS v4.0:
MEDIA
Tipo:
CWE-476
Desreferencia a puntero nulo (NULL)
Fecha de publicación:
13/08/2026
Última modificación:
28/08/2026
Descripción
*** Pendiente de traducción *** CVE-2026-55401 is a null dereference vulnerability on the load-balancing<br />
sub-system of Secure Access servers prior to 14.57. Attackers can send <br />
an unauthenticated packet to a Secure Access server with load balancing <br />
enabled, which results in the internal load balancer crashing. After a <br />
successful attack, the Secure Access server is still able to accept <br />
connections and is still able to issue a failover to connected clients. https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L
Impacto
Puntuación base 4.0
6.90
Gravedad 4.0
MEDIA