CVE-2026-15506
HIGH SEVERITYCVSS Score & Metrics
Base Score
7.8 / 10
Vector String
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Description
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-119
Source
NVD
Vendor
SecureAge
Product
CatchPulse
External References
- https://vandalsuidaho-my.sharepoint.com/:w:/g/personal/higg2059_vandals_uidaho_edu/IQAcnBjRQKVxQbLuSb5CI-8nAdTRuWZMO0jEuQ5PUQT7__s?e=4sd123
- https://vuldb.com/cve/CVE-2026-15506
- https://vuldb.com/submit/845584
- https://vuldb.com/vuln/377835
- https://vuldb.com/vuln/377835/cti
- https://youtu.be/xZqRVWlrah8
Discussion (0)
Add Comment
No comments yet. Be the first!