What is GHSA-vj56-2hgh-hfqf?

GHSA-vj56-2hgh-hfqf is a security advisory published by GitHub Security Advisories with High severity. CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows...

Which CVE IDs does GHSA-vj56-2hgh-hfqf cover?

GHSA-vj56-2hgh-hfqf covers the following CVE IDs: CVE-2026-40952. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-vj56-2hgh-hfqfHigh

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows...

Vendor

GitHub Security Advisories

Published

July 15, 2026

Last Modified

July 15, 2026

🔗 CVE IDs covered (1)

CVE-2026-40952 →

📋 Description

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-40952
https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2026-40952
https://github.com/advisories/GHSA-vj56-2hgh-hfqf