CVE-2026-0517

Denial of Service in Secure Access Servers Prior to 14.20.

Medium · published January 17, 2026

CVSS v4.0
6.0
EPSS
0%
Percentile
23.1
In the wild
Unconfirmed
What it is

⚠️ A single crafty packet can bring your Secure Access Server crashing down! This denial-of-service vulnerability in versions before 14.20 is a surprisingly simple way for an attacker to disrupt your service. 🔧 Think of it like a restaurant; one rude customer can cause a scene that disrupts the entire dining experience. Just like that, this vulnerability lets an attacker send a packet that can make your server go belly up, leaving your service unreachable. If exploited, this vulnerability could lead to significant downtime, affecting all users connected to the server. In a world where availability is key, this could be more than just an annoyance; it might impact your business operations and user trust.

Put simply

Think of it like a restaurant; one rude customer can cause a scene that disrupts the entire dining experience. Just like that, this vulnerability lets an attacker send a packet that can make your server go belly up, leaving your service unreachable. CVE-2026-0517 allows an attacker to send a specially crafted packet to older versions of Secure Access Server, causing it to crash and become unavailable, which directly affects service continuity.

What to do

If exploited, this vulnerability could lead to significant downtime, affecting all users connected to the server. In a world where availability is key, this could be more than just an annoyance; it might impact your business operations and user trust. To protect your systems, upgrade your Secure Access Server to version 14.20 or later immediately. Regularly review your server configurations and ensure they're up-to-date to guard against similar vulnerabilities in the future. You've got this! With these steps, you'll keep your server safe and sound. 🛡️

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00314 · 23.1th percentile
Published
2026-01-17T01:04Z
EPSS history
Timeline
  • 17 JAN 01:04Z
    Denial of Service in Secure Access Servers Prior to 14.20.
    cvelistv5