CVE-2026-97718

None

CVSS

—

EPSS

0.4%

Published

Nov 2, 2026

CISA due date

—

The record

CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control.

Affected packages

Ecosystem	Package	Introduced	Fixed