CVE-2026-33449

Message handler buffer overflow in clients prior to 14.50

Low · published April 30, 2026

CVSS v4.0
2.3
EPSS
0%
Percentile
33.4
In the wild
Unconfirmed
What it is

CVE-2026-33449 is a buffer overflow in a message handling function of

the Secure Access client prior to 14.50. Attackers with control of

a modified server can send a cryptographically valid message to the

client, overwriting a small portion of memory conceivably leading to a

denial of service.

The record
Technical detail
CVSS v4.0
2.3 · LOW
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00403 · 33.4th percentile
Published
2026-04-30T19:52Z
EPSS history
Timeline
  • 30 APR 19:52Z
    Message handler buffer overflow in clients prior to 14.50
    cvelistv5