CVE-2025-54088 is an open-redirect vulnerability in Secure Access prior to version 14.10. Attackers with access to the console can redirect victims to an arbitrary URL. The attack complexity is low, attack requirements are present, no privileges are required, and users must actively participate in the attack. Impact to confidentiality is low and there is no impact to integrity or availability. There are high severity impacts to confidentiality, integrity, availability in subsequent systems.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.absolute.com/platform/security-information/vulnerability-archive/cve-2025-54088 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · absoluteNVD modified 2026-10-12 15:10
Affected (CPE criteria) 1
cpe:2.3:a:absolute:secure_access:*:*:*:*:*:*:*:*