Search
Find a vulnerability
Search criteria
7 vulnerabilities found for CatchPulse by SecureAge
CVE-2026-55980 (GCVE-0-2026-55980)
Vulnerability from cvelistv5 – Published: 2026-08-06 09:23 – Updated: 2026-08-06 12:23
VLAI
EPSS
VEX
Title
Denial-of-service vulnerability in CatchPulse
Summary
A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition.
Severity
5.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-121 - Stack-based Buffer Overflow
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| SecureAge | CatchPulse |
Affected:
10.10.0 and earlier
|
Date Public
2026-08-06 09:22
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-55980",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-06T12:23:27.986503Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-121",
"description": "CWE-121 Stack-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T12:23:49.712Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "CatchPulse",
"vendor": "SecureAge",
"versions": [
{
"status": "affected",
"version": "10.10.0 and earlier"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Mr Ang Kar Min"
}
],
"datePublic": "2026-08-06T09:22:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "A denial-of-service vulnerability in\u0026nbsp;CatchPulse\u0026nbsp;could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition."
}
],
"value": "A denial-of-service vulnerability in\u00a0CatchPulse\u00a0could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T09:23:50.387Z",
"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
"shortName": "CSA"
},
"references": [
{
"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/"
},
{
"url": "https://www.secureage.com/security-vulnerabilities#"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Users and administrators of affected products are advised to\u0026nbsp;update to the latest versions."
}
],
"value": "Users and administrators of affected products are advised to\u00a0update to the latest versions."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Denial-of-service vulnerability in CatchPulse",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
"assignerShortName": "CSA",
"cveId": "CVE-2026-55980",
"datePublished": "2026-08-06T09:23:50.387Z",
"dateReserved": "2026-06-18T04:11:38.685Z",
"dateUpdated": "2026-08-06T12:23:49.712Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-55979 (GCVE-0-2026-55979)
Vulnerability from cvelistv5 – Published: 2026-08-06 09:20 – Updated: 2026-08-06 12:24
VLAI
EPSS
VEX
Title
Improper access control check in CatchPulse's named pipe communication interface
Summary
An improper access control check in CatchPulse's named pipe communication interface could allow an attacker to invoke CatchPulse functions. This is limited to operations that enforce more restrictive security policies.
Severity
5.2 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-284 - Improper Access Control
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| SecureAge | CatchPulse |
Affected:
10.10.0 and earlier
|
Date Public
2026-08-06 09:19
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-55979",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-06T12:24:17.146593Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T12:24:35.068Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "CatchPulse",
"vendor": "SecureAge",
"versions": [
{
"status": "affected",
"version": "10.10.0 and earlier"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Mr Ang Kar Min"
}
],
"datePublic": "2026-08-06T09:19:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An improper access control check in\u0026nbsp;CatchPulse\u0027s\u0026nbsp;named pipe communication interface could allow an attacker to invoke\u0026nbsp;CatchPulse\u0026nbsp;functions.\u0026nbsp;This\u0026nbsp;is limited to operations that enforce more restrictive security policies."
}
],
"value": "An improper access control check in\u00a0CatchPulse\u0027s\u00a0named pipe communication interface could allow an attacker to invoke\u00a0CatchPulse\u00a0functions.\u00a0This\u00a0is limited to operations that enforce more restrictive security policies."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T09:20:55.849Z",
"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
"shortName": "CSA"
},
"references": [
{
"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/"
},
{
"url": "https://www.secureage.com/security-vulnerabilities#"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Users and administrators of affected products are advised to\u0026nbsp;update to the latest versions."
}
],
"value": "Users and administrators of affected products are advised to\u00a0update to the latest versions."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Improper access control check in CatchPulse\u0027s named pipe communication interface",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
"assignerShortName": "CSA",
"cveId": "CVE-2026-55979",
"datePublished": "2026-08-06T09:20:55.849Z",
"dateReserved": "2026-06-18T04:11:38.685Z",
"dateUpdated": "2026-08-06T12:24:35.068Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-55978 (GCVE-0-2026-55978)
Vulnerability from cvelistv5 – Published: 2026-08-06 09:18 – Updated: 2026-08-06 12:25
VLAI
EPSS
VEX
Title
Improper access control vulnerability in CatchPulse
Summary
An improper access control vulnerability in CatchPulse could allow a non-administrative local attacker to connect to an unrestricted kernel filter communication port and bypass CatchPulse's security policy enforcement.
Severity
8.4 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-284 - Improper Access Control
Assigner
References
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| SecureAge | CatchPulse |
Affected:
10.10.0 and earlier
|
Date Public
2026-08-06 09:15
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-55978",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-08-06T12:24:59.241558Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "CWE-284 Improper Access Control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T12:25:17.316Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "CatchPulse",
"vendor": "SecureAge",
"versions": [
{
"status": "affected",
"version": "10.10.0 and earlier"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Mr Ang Kar Min"
}
],
"datePublic": "2026-08-06T09:15:00.000Z",
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "An improper access control vulnerability in\u0026nbsp;CatchPulse\u0026nbsp;could allow a non-administrative local\u202fattacker to connect to an unrestricted kernel filter communication port and bypass\u0026nbsp;CatchPulse\u0027s\u0026nbsp;security policy enforcement.\u0026nbsp;"
}
],
"value": "An improper access control vulnerability in\u00a0CatchPulse\u00a0could allow a non-administrative local\u202fattacker to connect to an unrestricted kernel filter communication port and bypass\u00a0CatchPulse\u0027s\u00a0security policy enforcement."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-06T09:18:32.685Z",
"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
"shortName": "CSA"
},
"references": [
{
"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/"
},
{
"url": "https://www.secureage.com/security-vulnerabilities#"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Users and administrators of affected products are advised to\u0026nbsp;update to the latest versions."
}
],
"value": "Users and administrators of affected products are advised to\u00a0update to the latest versions."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Improper access control vulnerability in CatchPulse",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4",
"assignerShortName": "CSA",
"cveId": "CVE-2026-55978",
"datePublished": "2026-08-06T09:18:32.685Z",
"dateReserved": "2026-06-18T04:11:38.685Z",
"dateUpdated": "2026-08-06T12:25:17.316Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-15506 (GCVE-0-2026-15506)
Vulnerability from cvelistv5 – Published: 2026-07-12 21:30 – Updated: 2026-07-14 16:35
VLAI
EPSS
VEX
Title
SecureAge CatchPulse Driver saappctl.sys heap-based overflow
Summary
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 10.10.0 is sufficient to fix this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/377835 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/377835/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-15506 | third-party-advisory |
| https://vuldb.com/submit/845584 | third-party-advisory |
| https://jordanhiggins.blog/catchpulse-antivirus-e… | broken-linkexploit |
| https://github.com/Kalagious/SecureAgeExploit | exploit |
| https://youtu.be/xZqRVWlrah8 | media-coverage |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| SecureAge | CatchPulse |
Affected:
10.9.0
Affected: 10.9.1 Affected: 10.9.2 Affected: 10.9.3 Unaffected: 10.10.0 cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-15506",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-13T18:06:21.412991Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-13T18:12:18.713Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:*"
],
"modules": [
"Driver"
],
"product": "CatchPulse",
"vendor": "SecureAge",
"versions": [
{
"status": "affected",
"version": "10.9.0"
},
{
"status": "affected",
"version": "10.9.1"
},
{
"status": "affected",
"version": "10.9.2"
},
{
"status": "affected",
"version": "10.9.3"
},
{
"status": "unaffected",
"version": "10.10.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Jordan Higgins"
},
{
"lang": "en",
"type": "reporter",
"value": "Jordanhiggins (VulDB User)"
},
{
"lang": "en",
"type": "analyst",
"value": "Jordanhiggins (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 10.10.0 is sufficient to fix this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.8,
"vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T16:35:28.887Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-377835 | SecureAge CatchPulse Driver saappctl.sys heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/377835"
},
{
"name": "VDB-377835 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/377835/cti"
},
{
"name": "CVE-2026-15506 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-15506"
},
{
"name": "Submit #845584 | SecureAge Technology CatchPulse \u003c10.9.3 Heap-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/845584"
},
{
"tags": [
"broken-link",
"exploit"
],
"url": "https://jordanhiggins.blog/catchpulse-antivirus-exploits/"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Kalagious/SecureAgeExploit"
},
{
"tags": [
"media-coverage"
],
"url": "https://youtu.be/xZqRVWlrah8"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-29T00:00:00.000Z",
"value": "Countermeasure disclosed"
},
{
"lang": "en",
"time": "2026-07-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-07-12T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-07-14T18:40:23.000Z",
"value": "VulDB entry last update"
}
],
"title": "SecureAge CatchPulse Driver saappctl.sys heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-15506",
"datePublished": "2026-07-12T21:30:12.054Z",
"dateReserved": "2026-07-12T05:44:41.811Z",
"dateUpdated": "2026-07-14T16:35:28.887Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11459 (GCVE-0-2026-11459)
Vulnerability from cvelistv5 – Published: 2026-06-07 08:15 – Updated: 2026-06-12 17:19
VLAI
EPSS
VEX
Title
SecureAge CatchPulse IOCTL saappctl.sys information disclosure
Summary
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/369078 | vdb-entry |
| https://vuldb.com/vuln/369078/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11459 | third-party-advisory |
| https://vuldb.com/submit/829131 | third-party-advisory |
| https://jordanhiggins.blog/catchpulse-antivirus-e… | broken-linkexploit |
| https://github.com/Kalagious/SecureAgeExploit | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| SecureAge | CatchPulse |
Affected:
10.9.0
Affected: 10.9.1 Affected: 10.9.2 Affected: 10.9.3 cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11459",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-08T13:05:20.334286Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-08T13:05:31.178Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:*"
],
"modules": [
"IOCTL Handler"
],
"product": "CatchPulse",
"vendor": "SecureAge",
"versions": [
{
"status": "affected",
"version": "10.9.0"
},
{
"status": "affected",
"version": "10.9.1"
},
{
"status": "affected",
"version": "10.9.2"
},
{
"status": "affected",
"version": "10.9.3"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Jordan Higgins"
},
{
"lang": "en",
"type": "finder",
"value": "Nathan Sawyer"
},
{
"lang": "en",
"type": "reporter",
"value": "Jordanhiggins (VulDB User)"
},
{
"lang": "en",
"type": "analyst",
"value": "Jordanhiggins (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 1.7,
"vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Information Disclosure",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Controls",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-12T17:19:09.964Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-369078 | SecureAge CatchPulse IOCTL saappctl.sys information disclosure",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/369078"
},
{
"name": "VDB-369078 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/369078/cti"
},
{
"name": "CVE-2026-11459 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11459"
},
{
"name": "Submit #829131 | SecureAge CatchPulse 10.9.1 Authentication Bypass by Spoofing",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/829131"
},
{
"tags": [
"broken-link",
"exploit"
],
"url": "https://jordanhiggins.blog/catchpulse-antivirus-exploits/"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Kalagious/SecureAgeExploit"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-06T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-06T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-12T19:23:59.000Z",
"value": "VulDB entry last update"
}
],
"title": "SecureAge CatchPulse IOCTL saappctl.sys information disclosure"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11459",
"datePublished": "2026-06-07T08:15:17.193Z",
"dateReserved": "2026-06-06T16:06:09.991Z",
"dateUpdated": "2026-06-12T17:19:09.964Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-15506 (GCVE-0-2026-15506)
Vulnerability from nvd – Published: 2026-07-12 21:30 – Updated: 2026-07-14 16:35
VLAI
EPSS
VEX
Title
SecureAge CatchPulse Driver saappctl.sys heap-based overflow
Summary
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 10.10.0 is sufficient to fix this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
7 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/377835 | vdb-entrytechnical-description |
| https://vuldb.com/vuln/377835/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-15506 | third-party-advisory |
| https://vuldb.com/submit/845584 | third-party-advisory |
| https://jordanhiggins.blog/catchpulse-antivirus-e… | broken-linkexploit |
| https://github.com/Kalagious/SecureAgeExploit | exploit |
| https://youtu.be/xZqRVWlrah8 | media-coverage |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| SecureAge | CatchPulse |
Affected:
10.9.0
Affected: 10.9.1 Affected: 10.9.2 Affected: 10.9.3 Unaffected: 10.10.0 cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-15506",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-07-13T18:06:21.412991Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-07-13T18:12:18.713Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:*"
],
"modules": [
"Driver"
],
"product": "CatchPulse",
"vendor": "SecureAge",
"versions": [
{
"status": "affected",
"version": "10.9.0"
},
{
"status": "affected",
"version": "10.9.1"
},
{
"status": "affected",
"version": "10.9.2"
},
{
"status": "affected",
"version": "10.9.3"
},
{
"status": "unaffected",
"version": "10.10.0"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Jordan Higgins"
},
{
"lang": "en",
"type": "reporter",
"value": "Jordanhiggins (VulDB User)"
},
{
"lang": "en",
"type": "analyst",
"value": "Jordanhiggins (VulDB User)"
},
{
"lang": "en",
"type": "coordinator",
"value": "VulDB CNA Team"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed publicly and may be used. Upgrading to version 10.10.0 is sufficient to fix this issue. You should upgrade the affected component. The vendor was contacted early about this disclosure."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 6.8,
"vectorString": "AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:OF/RC:C",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-122",
"description": "Heap-based Buffer Overflow",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-119",
"description": "Memory Corruption",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-14T16:35:28.887Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-377835 | SecureAge CatchPulse Driver saappctl.sys heap-based overflow",
"tags": [
"vdb-entry",
"technical-description"
],
"url": "https://vuldb.com/vuln/377835"
},
{
"name": "VDB-377835 | CTI Indicators (IOB, IOC, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/377835/cti"
},
{
"name": "CVE-2026-15506 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-15506"
},
{
"name": "Submit #845584 | SecureAge Technology CatchPulse \u003c10.9.3 Heap-based Buffer Overflow",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/845584"
},
{
"tags": [
"broken-link",
"exploit"
],
"url": "https://jordanhiggins.blog/catchpulse-antivirus-exploits/"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Kalagious/SecureAgeExploit"
},
{
"tags": [
"media-coverage"
],
"url": "https://youtu.be/xZqRVWlrah8"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-29T00:00:00.000Z",
"value": "Countermeasure disclosed"
},
{
"lang": "en",
"time": "2026-07-12T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-07-12T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-07-14T18:40:23.000Z",
"value": "VulDB entry last update"
}
],
"title": "SecureAge CatchPulse Driver saappctl.sys heap-based overflow"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-15506",
"datePublished": "2026-07-12T21:30:12.054Z",
"dateReserved": "2026-07-12T05:44:41.811Z",
"dateUpdated": "2026-07-14T16:35:28.887Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-11459 (GCVE-0-2026-11459)
Vulnerability from nvd – Published: 2026-06-07 08:15 – Updated: 2026-06-12 17:19
VLAI
EPSS
VEX
Title
SecureAge CatchPulse IOCTL saappctl.sys information disclosure
Summary
A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
Assigner
References
6 references
| URL | Tags |
|---|---|
| https://vuldb.com/vuln/369078 | vdb-entry |
| https://vuldb.com/vuln/369078/cti | signaturepermissions-required |
| https://vuldb.com/cve/CVE-2026-11459 | third-party-advisory |
| https://vuldb.com/submit/829131 | third-party-advisory |
| https://jordanhiggins.blog/catchpulse-antivirus-e… | broken-linkexploit |
| https://github.com/Kalagious/SecureAgeExploit | exploit |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| SecureAge | CatchPulse |
Affected:
10.9.0
Affected: 10.9.1 Affected: 10.9.2 Affected: 10.9.3 cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:* |
Credits
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-11459",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-08T13:05:20.334286Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-08T13:05:31.178Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:*"
],
"modules": [
"IOCTL Handler"
],
"product": "CatchPulse",
"vendor": "SecureAge",
"versions": [
{
"status": "affected",
"version": "10.9.0"
},
{
"status": "affected",
"version": "10.9.1"
},
{
"status": "affected",
"version": "10.9.2"
},
{
"status": "affected",
"version": "10.9.3"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Jordan Higgins"
},
{
"lang": "en",
"type": "finder",
"value": "Nathan Sawyer"
},
{
"lang": "en",
"type": "reporter",
"value": "Jordanhiggins (VulDB User)"
},
{
"lang": "en",
"type": "analyst",
"value": "Jordanhiggins (VulDB User)"
}
],
"descriptions": [
{
"lang": "en",
"value": "A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used."
}
],
"metrics": [
{
"cvssV4_0": {
"baseScore": 4.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
"version": "4.0"
}
},
{
"cvssV3_1": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.1"
}
},
{
"cvssV3_0": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R",
"version": "3.0"
}
},
{
"cvssV2_0": {
"baseScore": 1.7,
"vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR",
"version": "2.0"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "Information Disclosure",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-284",
"description": "Improper Access Controls",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-12T17:19:09.964Z",
"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"shortName": "VulDB"
},
"references": [
{
"name": "VDB-369078 | SecureAge CatchPulse IOCTL saappctl.sys information disclosure",
"tags": [
"vdb-entry"
],
"url": "https://vuldb.com/vuln/369078"
},
{
"name": "VDB-369078 | CTI Indicators (IOB, IOC, TTP, IOA)",
"tags": [
"signature",
"permissions-required"
],
"url": "https://vuldb.com/vuln/369078/cti"
},
{
"name": "CVE-2026-11459 | CVE Analysis and Report",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/cve/CVE-2026-11459"
},
{
"name": "Submit #829131 | SecureAge CatchPulse 10.9.1 Authentication Bypass by Spoofing",
"tags": [
"third-party-advisory"
],
"url": "https://vuldb.com/submit/829131"
},
{
"tags": [
"broken-link",
"exploit"
],
"url": "https://jordanhiggins.blog/catchpulse-antivirus-exploits/"
},
{
"tags": [
"exploit"
],
"url": "https://github.com/Kalagious/SecureAgeExploit"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-06T00:00:00.000Z",
"value": "Advisory disclosed"
},
{
"lang": "en",
"time": "2026-06-06T02:00:00.000Z",
"value": "VulDB entry created"
},
{
"lang": "en",
"time": "2026-06-12T19:23:59.000Z",
"value": "VulDB entry last update"
}
],
"title": "SecureAge CatchPulse IOCTL saappctl.sys information disclosure"
}
},
"cveMetadata": {
"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5",
"assignerShortName": "VulDB",
"cveId": "CVE-2026-11459",
"datePublished": "2026-06-07T08:15:17.193Z",
"dateReserved": "2026-06-06T16:06:09.991Z",
"dateUpdated": "2026-06-12T17:19:09.964Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}