SecureAge CatchPulse up to 10.9.3 Driver saappctl.sys heap-based overflow

Summaryinfo

A vulnerability has been found in SecureAge CatchPulse up to 10.9.3 and classified as critical. The impacted element is an unknown function in the library saappctl.sys of the component Driver. Performing a manipulation results in heap-based overflow. This vulnerability is known as CVE-2026-15506. Attacking locally is a requirement. Furthermore, an exploit is available. The affected component should be upgraded. The vendor was contacted early about this disclosure.

Detailsinfo

A vulnerability was found in SecureAge CatchPulse up to 10.9.3 (Anti-Malware Software). It has been classified as critical. This affects an unknown part in the library saappctl.sys of the component Driver. The manipulation with an unknown input leads to a heap-based overflow vulnerability. CWE is classifying the issue as CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). This is going to have an impact on confidentiality, integrity, and availability.

The weakness was published by Jordan Higgins as not defined blog post. It is possible to read the advisory at jordanhiggins.blog. The public release has been coordinated with SecureAge. This vulnerability is uniquely identified as CVE-2026-15506. The exploitability is told to be easy. Attacking locally is a requirement. Technical details and a public exploit are known.

A public exploit has been developed by Jordan Higgins. The exploit is shared for download at github.com. It is declared as proof-of-concept. The vendor was contacted early about this disclosure.

Upgrading to version 10.10.0 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2026-43247). Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Anti-Malware Software

Vendor

• SecureAge

Name

• CatchPulse

Version

• 10.9.0
• 10.9.1
• 10.9.2
• 10.9.3

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

Video

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Submitinfo

Accepted

• Submit #845584: SecureAge Technology CatchPulse <10.9.3 Heap-based Buffer Overflow (by Jordanhiggins)

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion