The vulnerability involves improper input handling in Secure Access server versions between 13.0 and prior to 14.61, allowing attackers to cause a persistent denial of service. The weakness is an instance of input validation failure (CWE‑20) and has a CVSS score of 8.3, indicating high severity.

Absolute Software Secure Access server 13.0 through versions earlier than 14.61 are affected. No other vendors or product variants are listed.

The CVSS rating reflects a high severity risk, and the EPSS score is currently unavailable, so the likelihood of exploitation cannot be quantified precisely. The vulnerability is not listed as a known exploited vulnerability in the CISA KEV catalog. Based on the description, the likely attack vector is remote network access where malicious input can be submitted to the server, leading to persistent service interruption. No special privileges are required beyond the ability to send crafted input to the affected software.