Improper input handling in Secure Access servers prior to 14.61 allows an authenticated attacker to trigger a persistent denial of service, rendering the application unavailable. The flaw does not compromise data confidentiality or integrity but can lead to prolonged outages, affecting business continuity.

Absolute Software Secure Access servers running any version earlier than 14.61 are impacted. Users should verify the exact build and update status of their deployments to determine exposure.

The vulnerability has a CVSS score of 7.1, indicating a medium severity. EPSS information is not available and it is not listed in the CISA KEV catalog, suggesting that widespread exploitation has not yet been observed. However, because the attack requires authenticated access, only users with valid credentials could exploit it. Once exploited, the denial of service is persistent until the service is restarted or patched.