CVE-2026-40955

An integer underflow vulnerability in the traffic parsing function of Secure Access clients prior to version 14.55 allows attackers with full control over the tunnel protocol to execute a non-persistent denial-of-service (DoS) attack against the client. While the severity is rated low, organizations utilizing affected Secure Access clients should prioritize patching to mitigate potential disruptions in service. This is particularly relevant for environments where secure tunneling is critical for operations.