Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/06/09 2:59 p.m.•34 views

CVE-2026-46656

Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has been physically deleted from the database. This "Ghost Session" allows revoked users to maintain full unauthorized...

8.8CVSS5.4AI score0.00506EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/08 4:16 p.m.•25 views

CVE-2026-46656

Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has been physically deleted from the database. This "Ghost Session" allows revoked users to maintain full unauthorized...

8.8CVSS0.00506EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/06/08 2:51 p.m.•31 views

EUVD-2026-35081

Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has been physically deleted from the database. This "Ghost Session" allows revoked users to maintain full unauthorized...

8.8CVSS5.4AI score0.00506EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/06/08 2:51 p.m.•10 views

CVE-2026-46656

Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has been physically deleted from the database. This "Ghost Session" allows revoked users to maintain full unauthorized...

8.8CVSS5.4AI score0.00506EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/08 12:00 a.m.•2 views

CVE-2026-46656: Improper Authorization

Bludit is a content management system. Versions prior to 3.22.0 have a Broken Access Control flaw where active sessions remain valid even after the corresponding user account has been physically deleted from the database. This "Ghost Session" allows revoked users to maintain full unauthorized...

8.8CVSS5.7AI score0.00506EPSS
SaveExploits0References3
Citrix
Citrix
•added 2021/06/25 12:00 a.m.•14 views

Connection Interrupted, issue reported with different version of Citrix Virtual Apps and Desktops

You may see user sessions are getting disconnected at launch, incomplete ghost session with name "-" is seen on the VDA and Connection Interrupted error for user. if vda have Microsoft defender Anti virus...

7.2AI score
SaveExploits0
Rows per page
Query Builder