CVE-2026-116769 is an authentication bypass vulnerability that allows attackers to modify security settings on client machines through the Secure Access server. Based on the description, it is inferred that the authentication mechanism accepts requests without verifying credentials, enabling unauthorized configuration changes. This can compromise the integrity of client security settings and potentially expose systems to malicious control.

The affected product is Absolute Security Secure Access server. Versions starting at 13.0 up to, but not including, 14.61 are vulnerable. Any deployment of these versions should be reviewed and corrected.

The CVSS score is 9.3, indicating a high severity vulnerability. The EPSS score is unavailable, so the current exploitation probability cannot be quantified, but the lack of a KEV listing suggests no widespread documented exploitation yet. The likely attack vector is remote over the network, though the description does not explicitly state this; it is inferred because attackers can modify client settings via the server. Exploitation requires access to the server interface but does not require privileged credentials, making the vulnerability relatively easy for an attacker to utilize.