VULNERABILITY INTELLIGENCE

CVE-2026-33448

CVSS score4.8 MEDIUM

EPSS probability0.10%

CISA KEVNot currently listed

Published2026-04-30

Last modified2026-10-26

Description

CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50. Attackers with control of a modified server can force the client to dump the contents of a small portion of memory to the log files potentially revealing secrets.