CVE-2026-97718 - Critical

Published: October 29, 2026‍

CVE-2026-97718 Is a cross-site request forgery attack in version 14.60 of the Secure Access server.  Because of a bypassed security control, an attacker can cause an admin to create an account under their control. 

CVSS score: 9.4 Critical 

https://www.first.org/cvss/calculator/4.0#CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H  

‍
Impacts 14.60 only. 

‍