CVE-2026-15506 | SecureAge CatchPulse up to 10.9.3 Driver saappctl.sys heap-based overflow

A vulnerability, which was classified as critical, was found in SecureAge CatchPulse up to 10.9.3. The affected element is an unknown function in the library saappctl.sys of the component Driver. Such manipulation leads to heap-based buffer overflow.

This vulnerability is traded as CVE-2026-15506. An attack has to be approached locally. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More