CVE-2026-15506 - CERT CVE
ID CVE-2026-15506
Sažetak A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Reference
CVSS
Base: 6.8
Impact: 10.0
Exploitability:3.1
Pristup
VektorSloženostAutentikacija
LOCAL LOW SINGLE
Impact
PovjerljivostCjelovitostDostupnost
COMPLETE COMPLETE COMPLETE
CVSS vektor AV:L/AC:L/Au:S/C:C/I:C/A:C
Zadnje važnije ažuriranje 12-07-2026 - 22:16
Objavljeno 12-07-2026 - 22:16