CVE-2026-11459

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-11459", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-06-06T16:06:09.991Z", "datePublished": "2026-06-07T08:15:17.193Z", "dateUpdated": "2026-06-12T17:19:09.964Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-12T17:19:09.964Z"}, "title": "SecureAge CatchPulse IOCTL saappctl.sys information disclosure", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-200", "lang": "en", "description": "Information Disclosure"}]}, {"descriptions": [{"type": "CWE", "cweId": "CWE-284", "lang": "en", "description": "Improper Access Controls"}]}], "affected": [{"vendor": "SecureAge", "product": "CatchPulse", "versions": [{"version": "10.9.0", "status": "affected"}, {"version": "10.9.1", "status": "affected"}, {"version": "10.9.2", "status": "affected"}, {"version": "10.9.3", "status": "affected"}], "cpes": ["cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:*"], "modules": ["IOCTL Handler"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.3, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.3, "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.7, "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-06-06T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-06-06T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-06-12T19:23:59.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Jordan Higgins", "type": "finder"}, {"lang": "en", "value": "Nathan Sawyer", "type": "finder"}, {"lang": "en", "value": "Jordanhiggins (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "Jordanhiggins (VulDB User)", "type": "analyst"}], "references": [{"url": "https://vuldb.com/vuln/369078", "name": "VDB-369078 | SecureAge CatchPulse IOCTL saappctl.sys information disclosure", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/369078/cti", "name": "VDB-369078 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-11459", "name": "CVE-2026-11459 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829131", "name": "Submit #829131 | SecureAge CatchPulse 10.9.1 Authentication Bypass by Spoofing", "tags": ["third-party-advisory"]}, {"url": "https://jordanhiggins.blog/catchpulse-antivirus-exploits/", "tags": ["broken-link", "exploit"]}, {"url": "https://github.com/Kalagious/SecureAgeExploit", "tags": ["exploit"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-08T13:05:20.334286Z", "id": "CVE-2026-11459", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-08T13:05:31.178Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-11459", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-08T13:05:20.334286Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-08T13:05:26.577Z"}}], "cna": {"title": "SecureAge CatchPulse IOCTL saappctl.sys information disclosure", "credits": [{"lang": "en", "type": "finder", "value": "Jordan Higgins"}, {"lang": "en", "type": "finder", "value": "Nathan Sawyer"}, {"lang": "en", "type": "reporter", "value": "Jordanhiggins (VulDB User)"}, {"lang": "en", "type": "analyst", "value": "Jordanhiggins (VulDB User)"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 4.8, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.3, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 1.7, "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:*"], "vendor": "SecureAge", "modules": ["IOCTL Handler"], "product": "CatchPulse", "versions": [{"status": "affected", "version": "10.9.0"}, {"status": "affected", "version": "10.9.1"}, {"status": "affected", "version": "10.9.2"}, {"status": "affected", "version": "10.9.3"}]}], "timeline": [{"lang": "en", "time": "2026-06-06T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-06-06T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-06-12T19:23:59.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/369078", "name": "VDB-369078 | SecureAge CatchPulse IOCTL saappctl.sys information disclosure", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/369078/cti", "name": "VDB-369078 | CTI Indicators (IOB, IOC, TTP, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-11459", "name": "CVE-2026-11459 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829131", "name": "Submit #829131 | SecureAge CatchPulse 10.9.1 Authentication Bypass by Spoofing", "tags": ["third-party-advisory"]}, {"url": "https://jordanhiggins.blog/catchpulse-antivirus-exploits/", "tags": ["broken-link", "exploit"]}, {"url": "https://github.com/Kalagious/SecureAgeExploit", "tags": ["exploit"]}], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-200", "description": "Information Disclosure"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "Improper Access Controls"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-12T17:19:09.964Z"}}}, "cveMetadata": {"cveId": "CVE-2026-11459", "state": "PUBLISHED", "dateUpdated": "2026-06-12T17:19:09.964Z", "dateReserved": "2026-06-06T16:06:09.991Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-06-07T08:15:17.193Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:secureage:catchpulse:*:*:*:*:*:*:*:*"], "modules": ["IOCTL Handler"], "product": "CatchPulse", "vendor": "SecureAge", "versions": [{"status": "affected", "version": "10.9.0"}, {"status": "affected", "version": "10.9.1"}, {"status": "affected", "version": "10.9.2"}, {"status": "affected", "version": "10.9.3"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A security vulnerability has been detected in SecureAge CatchPulse up to 10.9.3. Impacted is an unknown function in the library saappctl.sys of the component IOCTL Handler. The manipulation leads to information disclosure. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used."}, {"lang": "es", "value": "Una vulnerabilidad de seguridad ha sido detectada en SecureAge CatchPulse hasta 10.9.1. Afectada es una funci\u00f3n desconocida en la biblioteca saappctl.sys del componente Gestor IOCTL. La manipulaci\u00f3n conduce a la revelaci\u00f3n de informaci\u00f3n. Se requiere acceso local para abordar este ataque. El exploit ha sido revelado p\u00fablicamente y puede ser utilizado. El proveedor fue contactado con antelaci\u00f3n sobre esta revelaci\u00f3n pero no respondi\u00f3 de ninguna manera."}], "id": "CVE-2026-11459", "lastModified": "2026-07-23T07:10:00.113", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 1.7, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 3.1, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.9, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-11459", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-08T13:05:20.334286Z", "version": "2.0.3"}}]}, "published": "2026-06-07T10:16:21.863", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/Kalagious/SecureAgeExploit"}, {"source": "cna@vuldb.com", "url": "https://jordanhiggins.blog/catchpulse-antivirus-exploits/"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-11459"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/829131"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/369078"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/369078/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-284"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "10.9.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "10.9.1"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "CatchPulse", "source": "cna", "vendor": "SecureAge"}, "product": "catchpulse", "vendor": "secureage"}], "created": "2026-06-07T10:30:05.992288+00:00", "updated": "2026-06-12T19:45:27.634022+00:00", "vendors": ["secureage", "secureage$PRODUCT$catchpulse"]}