CVE-2026-40954

An integer underflow vulnerability exists in the traffic parsing function of Secure Access clients prior to version 14.55, allowing attackers with full control over the tunnel protocol to launch a non-persistent denial-of-service (DoS) attack against affected clients. While the severity is rated low, organizations using these clients should prioritize patching to mitigate potential disruptions in service. This is particularly relevant for environments where secure tunnel protocols are critical for operations.