CVE-2026-15506

SecureAge CatchPulse Driver saappctl.sys heap-based overflow

View on CVE.org
Published Jul 12, 2026 CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Description
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 10.10.0 is sufficient to fix this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure.

Analysis

AI-generated

Technical impact

A heap-based buffer overflow occurs in an unknown function of the SecureAge CatchPulse driver library saappctl.sys. The overflow can overwrite heap memory, as identified by CWE‑119 and CWE‑122. If successfully exploited, it could allow an attacker with local privileges to execute arbitrary code, compromising system integrity and confidentiality.

Affected Systems

SecureAge CatchPulse versions up to and including 10.9.3 that install the driver saappctl.sys. Any machine running these versions is potentially vulnerable.

Risk and Exploitability

The vulnerability has a CVSS score of 8.5, indicating high severity. The EPSS score is below 1 %, implying a very low current likelihood of exploitation. It is not listed in CISA’s KEV catalog. The attack vector is local; an attacker must have local access to trigger the overflow. Although publicly disclosed, exploit code may be available, but this is not confirmed.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade SecureAge CatchPulse to version 10.10.0 or later, which fixes the saappctl.sys heap overflow.
  • If an upgrade is not immediately possible, uninstall or disable the saappctl.sys driver and the SecureAge CatchPulse application to remove the vulnerable component.
  • Enforce least‑privilege policies for local accounts, granting administrative rights only when absolutely necessary, to reduce the risk of local exploitation.

Generated by OpenCVE AI on July 31, 2026 at 12:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
Description A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure. A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 10.10.0 is sufficient to fix this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure.
References
Metrics cvssV2_0

{'score': 6.8, 'vector': 'AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.8, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

 cvssV2_0

{'score': 6.8, 'vector': 'AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 7.8, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C'}
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Title SecureAge CatchPulse Driver saappctl.sys heap-based overflow
First Time appeared Secureage
Secureage catchpulse
Weaknesses CWE-119
CWE-122
CPEs cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:*
Vendors & Products Secureage
Secureage catchpulse
References
Metrics cvssV2_0

{'score': 6.8, 'vector': 'AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR'}

cvssV3_0

{'score': 7.8, 'vector': 'CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV3_1

{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R'}

cvssV4_0

{'score': 8.5, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P'}
Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer

  • CWE-122

    Heap-based Buffer Overflow

Sources

Status
PUBLISHED
Assigner
VulDB
Published
Updated
Jul 14, 2026, 4:35 PM
Reserved
Jul 12, 2026, 5:44 AM

View source JSON

Updated
Jul 13, 2026, 6:06 PM

JSON

Status
Deferred
Published
Jul 12, 2026, 10:16 PM
Modified
Oct 24, 2026, 10:10 PM

View source JSON

No data.

Updated
Jul 31, 2026, 12:30 PM

JSON