CVE-2026-11459CWE-200CWE-284
SecureAge CatchPulse IOCTL saappctl.sys information disclosure
Medium · published June 7, 2026
What it is
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used.
The record
Technical detail
- CVSS v4.0
- 4.8 · MEDIUM
- Vector
- CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
- EPSS
- 0.00106 · 1.1th percentile
- Weaknesses
- CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor; CWE-284 · Improper Access Control
- Published
- 2026-06-07T08:15Z
EPSS history
Timeline