Description
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used.
Published: 2026-06-07
Score: 4.8 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw resides in the SecureAge CatchPulse driver saappctl.sys, specifically an unknown function in its IOCTL handler. By manipulating this function, a local attacker can expose sensitive data stored by the driver. The vulnerability can disclose information that should be protected, and it requires local execution privileges to target the driver. Public exploits are available, enabling potential attackers to leverage this disclosure in affected systems.

Affected Systems

The affected product is SecureAge CatchPulse, versions up through 10.9.3. The vulnerability resides in the saappctl.sys driver, accessed via the IOCTL interface. Only systems running these firmware or software versions are impacted.

Risk and Exploitability

The CVSS score of 4.8 indicates a moderate risk, and the EPSS score is < 1%. The vulnerability is not listed in the CISA KEV catalog. Local access is required to begin the attack; an attacker must have the ability to issue IOCTL commands to the driver. Once local access is achieved, the vulnerability can be leveraged to disclose internal data exposed by the driver without additional network or privilege escalation steps.

Generated by OpenCVE AI on June 12, 2026 at 19:37 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade SecureAge CatchPulse to a version newer than 10.9.3 that contains the fix.
  • Restrict local access to the saappctl.sys driver by configuring appropriate permissions or applying the principle of least privilege.
  • Monitor system logs for anomalous IOCTL activity that may indicate exploitation attempts, and investigate any suspicious events.

Generated by OpenCVE AI on June 12, 2026 at 19:37 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 12 Jun 2026 18:00:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used.

Tue, 09 Jun 2026 06:15:00 +0000

Type Values Removed Values Added
References

Mon, 08 Jun 2026 16:30:00 +0000

Type Values Removed Values Added
References

Mon, 08 Jun 2026 15:45:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.1. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
References

Mon, 08 Jun 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 07 Jun 2026 09:30:00 +0000

Type Values Removed Values Added
Description A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.1. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Title SecureAge CatchPulse IOCTL saappctl.sys information disclosure
First Time appeared Secureage
Secureage catchpulse
Weaknesses CWE-200
CWE-284
CPEs cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:*
Vendors & Products Secureage
Secureage catchpulse
References
Metrics cvssV2_0

{'score': 1.7, 'vector': 'AV:L/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 3.3, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 4.8, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}

Subscriptions

Secureage Catchpulse
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-06-12T17:19:09.964Z

Reserved: 2026-06-06T16:06:09.991Z

Link: CVE-2026-11459

cve-icon Vulnrichment

Updated: 2026-06-08T13:05:26.577Z

cve-icon NVD

Status : Deferred

Published: 2026-06-07T10:16:21.863

Modified: 2026-06-12T18:16:32.377

Link: CVE-2026-11459

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-12T19:45:27Z

Weaknesses
  • CWE-200

    Exposure of Sensitive Information to an Unauthorized Actor

  • CWE-284

    Improper Access Control