CVE-2026-15506

CVE-2026-15506 affects SecureAge CatchPulse (up to 10.9.3). The vulnerable element is an unknown function in the saappctl.sys driver library, where manipulation leads to a heap-based buffer overflow. Exploitation is local, and publicly disclosed exploits exist. The vendor was contacted about this...

CVE-2026-11459

CVE-2026-11459 affects SecureAge CatchPulse up to 10.9.1. The issue is in an unknown function within the saappctl.sys IOCTL Handler library, where manipulation leads to information disclosure. Local access is required. Public exploitation is disclosed, and the vendor did not respond. Concrete rem...