OpenVPN Access Server 2.1.4 - CRLF Injection

CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers and consequently conduct session fixation attacks and possibly HTTP response splitting attacks via "%0A" characters in the PATHINFO to sessionstart/. id:...

CVE-2026-116766

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

CVE-2026-97718

CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control...

EUVD-2026-115614

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

CVE-2026-116766

CVE-2026-116766 describes an improper input handling vulnerability in the Secure Access server affecting versions 13.0 through prior to 14.61 . An attacker can exploit this flaw to cause a persistent denial of service (DoS) of the server. No specific exploit information or remediation details are...

CVE-2026-116766 Improper input handling in Secure Access server

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

EUVD-2026-115452

CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control...

CVE-2026-97718

A cross-site request forgery (CSRF) vulnerability exists in version 14.60 of the Secure Access server . Due to a bypassed security control , a remote attacker can trick an administrator into creating a new account under the attacker's control. No specific remediation steps or exploit links are pr...

CVE-2026-97718 CSRF in Secure Access Server v14.60

CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control...

PT-2026-135796

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

PT-2026-135813

Name of the Vulnerable Software and Affected Versions Secure Access server version 14.60 Description A cross-site request forgery CSRF issue exists due to a bypassed security control. This allows an attacker to trick an administrator into creating an account under the attacker's control...

CVE-2026-97718: Absolute Security Secure Access: CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server

CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control...

CVE-2026-116766: Absolute Software Secure Access: CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior…

CVE-2026-116766 is an improper input handling vulnerability in the Secure Access server versions between 13.0 and prior to 14.61. Attackers can cause a persistent denial of service of the server...

CVE-2026-97715

CVE-2026-97715 is a vulnerability in the client registration process of Secure Access servers prior to version 14.60. Authenticated attackers can pass malformed data to the server and cause a persistent denial of service...

EUVD-2026-94577

CVE-2026-97716 is a vulnerability in the connection set up sub-system of Secure Access servers prior to version 14.60. Unauthenticated attackers can send specially crafted traffic to the server and cause a persistent denial of service...

OpenVPN Access Server 2.1.4 - CRLF Injection Detection

CRLF injection vulnerability in the web interface in OpenVPN Access Server 2.1.4 allows remote attackers to inject arbitrary HTTP headers and consequently conduct session fixation attacks and possibly HTTP response splitting attacks via "%0A" characters in the PATHINFO to sessionstart/...

OpenVPN Access Server - Configuration Exposure Detection

Detected OpenVPN Access Server with sensitive configuration data exposed, including VPN client profiles, certificates, private keys, and session tokens, without authentication. !/usr/bin/env python3 -- coding: utf-8 -- """Detected OpenVPN Access Server with sensitive configuration data exposed,...

OpenVPN Host Header Injection Detection

A vulnerability in OpenVPN Access Server allows remote attackers to inject arbitrary redirection URLs by using the 'Host' HTTP header field. !/usr/bin/env python3 -- coding: utf-8 -- """A vulnerability in OpenVPN Access Server allows remote attackers to inject arbitrary redirection URLs by...

CVE-2026-40957

o CVE-2026-40957 is a frameable content vulnerability in the Secure Access server login page prior to 14.55. Attackers with control of a malicious web site could use it to potentially steal credentials from an unwary administrator...

EUVD-2026-44801

CVE-2026-33445 is a memory management vulnerability in Secure Access servers prior to 14.55. Attackers with an intimate knowledge of and total control over the tunnel protocol can create a persistent DoS against the server...