CVE-2026-55980 - Vulnerability Details - OpenCVE

A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Secureage	Catchpulse

No data.

No data.

References

Link	Providers
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/
https://www.secureage.com/security-vulnerabilities#

History

Thu, 06 Aug 2026 15:30:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-119

Thu, 06 Aug 2026 13:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-121
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 06 Aug 2026 11:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Secureage Secureage catchpulse
Weaknesses		CWE-119
Vendors & Products		Secureage Secureage catchpulse

Thu, 06 Aug 2026 10:15:00 +0000

Type	Values Removed	Values Added
Description		A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition.
Title		Denial-of-service vulnerability in CatchPulse
References		https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/ https://www.secureage.com/security-vulnerabilities#
Metrics		cvssV3_1 `{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: CSA

Published: 2026-08-06T09:23:50.387Z

Updated: 2026-08-06T12:23:49.712Z

Reserved: 2026-06-18T04:11:38.685Z

Link: CVE-2026-55980

Vulnrichment

Updated: 2026-08-06T12:23:44.066Z

NVD

Status : Received

Published: 2026-08-06T10:16:44.247

Modified: 2026-08-06T13:18:21.050

Link: CVE-2026-55980

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-55980", "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "state": "PUBLISHED", "assignerShortName": "CSA", "dateReserved": "2026-06-18T04:11:38.685Z", "datePublished": "2026-08-06T09:23:50.387Z", "dateUpdated": "2026-08-06T12:23:49.712Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "shortName": "CSA", "dateUpdated": "2026-08-06T09:23:50.387Z"}, "title": "Denial-of-service vulnerability in CatchPulse", "datePublic": "2026-08-06T09:22:00.000Z", "affected": [{"vendor": "SecureAge", "product": "CatchPulse", "versions": [{"status": "affected", "version": "10.10.0 and earlier"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A denial-of-service vulnerability in\u00a0CatchPulse\u00a0could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition."}]}], "references": [{"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/"}, {"url": "https://www.secureage.com/security-vulnerabilities#"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}}], "solutions": [{"lang": "en", "value": "Users and administrators of affected products are advised to\u00a0update to the latest versions.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Users and administrators of affected products are advised to update to the latest versions."}]}], "credits": [{"lang": "en", "value": "Mr Ang Kar Min", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-121", "lang": "en", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-06T12:23:27.986503Z", "id": "CVE-2026-55980", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T12:23:49.712Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-55980", "assignerOrgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "state": "PUBLISHED", "assignerShortName": "CSA", "dateReserved": "2026-06-18T04:11:38.685Z", "datePublished": "2026-08-06T09:23:50.387Z", "dateUpdated": "2026-08-06T12:23:49.712Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "5f57b9bf-260d-4433-bf07-b6a79e9bb7d4", "shortName": "CSA", "dateUpdated": "2026-08-06T09:23:50.387Z"}, "title": "Denial-of-service vulnerability in CatchPulse", "datePublic": "2026-08-06T09:22:00.000Z", "affected": [{"vendor": "SecureAge", "product": "CatchPulse", "versions": [{"status": "affected", "version": "10.10.0 and earlier"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "A denial-of-service vulnerability in\u00a0CatchPulse\u00a0could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A denial-of-service vulnerability in CatchPulse could allow an attacker to conduct a stack buffer overrun attack, leading to a denial-of-service condition."}]}], "references": [{"url": "https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-098/"}, {"url": "https://www.secureage.com/security-vulnerabilities#"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 5.5, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}}], "solutions": [{"lang": "en", "value": "Users and administrators of affected products are advised to\u00a0update to the latest versions.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Users and administrators of affected products are advised to update to the latest versions."}]}], "credits": [{"lang": "en", "value": "Mr Ang Kar Min", "type": "finder"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.4"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-55980", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-06T12:23:27.986503Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-121", "description": "CWE-121 Stack-based Buffer Overflow"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-06T12:23:44.066Z"}}]}}