CVE-2025-59596 - CVE-2025-59596 is a denial-of-service vulnerability in Secure Access · CoreCVE

Back Back to CVE browser

MEDIUM

CVE-2025-59596 is a denial-of-service vulnerability in Secure Access

Published Nov 4, 2025

6.0

MEDIUM

CVSS 4.0

EPSS 0.22%

Description

CVE-2025-59596 is a denial-of-service vulnerability in Secure Access Windows client versions 12.0 to 14.10 that is addressed in version 14.12. If a local networking policy is active, attackers on an adjacent network may be able to send a crafted packet and cause the client system to crash.

Affected products

Vendor Absolute Security Product Secure Access Default
unaffected
- Version
  12.0
  Status
  affected
  Constraints
  <14.12

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Absolute Security

unaffected

Version	Status	Constraints
12.0	affected	<14.12

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-20

Improper Input Validation

References (1)

https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-59596
Vendor Advisory

Link	Providers	Tags
https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-59596		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Absolute

Published Nov 4, 2025

Updated Nov 5, 2025

Reserved Sep 17, 2025

Link CVE-2025-59596

CISA Vulnrichment

Updated Nov 5, 2025

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-59596

Severity n/a

Public date n/a

Links CVE-2025-59596