CVE-2026-11459 SecureAge CatchPulse Information Disclosure Vulnerability

Technical summary

CVE-2026-11459 is an information disclosure vulnerability affecting SecureAge CatchPulse through version 10.9.3. The flaw resides in an undocumented function within the saappctl.sys kernel driver's IOCTL handler. The vulnerability stems from insufficient access controls (CWE-284) and improper information handling (CWE-200), allowing a local authenticated user to read sensitive data without proper authorization. The attack surface is limited to local interactions; remote exploitation is not possible.

Business impact

While the CVSS score of 3.3 reflects low severity, this vulnerability poses a targeted risk to organizations relying on CatchPulse for security operations. Information disclosure at the kernel driver level could expose configuration details, credentials, or monitoring data to insider threats or compromised local accounts. The public disclosure and proof-of-concept availability increase the likelihood of weaponization, particularly in multi-tenant or shared computing environments where privilege escalation chains may follow.

Affected systems

SecureAge CatchPulse versions up to and including 10.9.3 are confirmed vulnerable. No vendor or product-specific mitigation data was provided in the source record, so affected organizations should consult SecureAge's official advisory for a complete list of impacted product variants and verify their installed versions immediately.

Exploitability

The vulnerability requires local access and valid user credentials, making opportunistic remote exploitation impossible. However, the public disclosure and existence of proof-of-concept code significantly lower the barrier to exploitation for attackers with local system access. The IOCTL handler's permissive behavior suggests this could be chained with other local privilege escalation vectors to amplify impact.

Remediation

Upgrade SecureAge CatchPulse to a patched version released after 10.9.3. Organizations unable to patch immediately should implement strict local access controls, disable or restrict IOCTL operations where possible, and monitor for suspicious kernel driver interactions. Verify against the vendor advisory for exact patch version numbers and compatibility details before deploying updates.

Patch guidance

Contact SecureAge for availability of patched CatchPulse versions newer than 10.9.3. Verify patch applicability to your specific deployment configuration and test in a non-production environment first. Given the kernel driver involvement, ensure system stability and rollback procedures are documented before applying updates to production systems.

Detection guidance

Monitor for unusual IOCTL requests to saappctl.sys from processes running under local user accounts. Kernel driver instrumentation or driver behavior analysis tools may reveal attempts to query sensitive information through the vulnerable handler. Review system logs for unexpected driver interactions and correlate with user account activity to identify suspicious patterns.

Why prioritize this

Despite the low CVSS score, prioritize patching based on environmental context: assess whether local user accounts have adequate access controls, whether your deployment is exposed to insider threats, and whether this system is part of a security-critical workflow. The public exploit availability and kernel-level nature of the issue make it a candidate for near-term remediation, particularly if the system has internet-facing components or untrusted user access.

Risk score, explained

The CVSS 3.1 score of 3.3 (LOW) reflects the requirement for local authenticated access and the confidentiality-only impact. However, this does not account for the public availability of working exploits or the potential for chaining with local privilege escalation techniques. Organizations should weight contextual risk factors—such as shared system usage, presence of higher-privilege accounts, and data sensitivity—when determining actual remediation priority.

Frequently asked questions