CVE-2026-97718
CSRF in NetMotion Secure Access 14.60 allowing admin account creation
- CVSS 4.0
- 9.4 critical
- EPSS
- —
- Published
- ·
- Modified
Cross-site request forgery in NetMotion Secure Access server version 14.60 lets an attacker cause an admin to create an account under their control after a security control bypass. The attack triggers via a crafted request needing user interaction. Admins using the affected server are at risk as they may create attacker-controlled accounts.
What to do: Apply NetMotion Software's update for CVE-2026-97718
| Product | Affected |
|---|---|
| NetMotion Software Secure Access | 14.60 |
Order-of-magnitude estimate by the model from install counts, market share and public scan data it knows; verify before quoting.
Description · NVD
CVE-2026-97718 Is a cross-site request forgery vulnerability in version 14.60 of the Secure Access server. Because of a bypassed security control, an attacker can cause an admin to create an account under their control.
- Vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
In the news
0 storiesNo ingested article mentions this CVE yet.