EUVD-2026-68324

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ashadmin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies tenant,...

PT-2026-83676

Reliance on Cookies without Validation and Integrity Checking vulnerability in ash-project ash admin lets an attacker who controls a sibling subdomain rebind an admin's session to a different actor, tenant, or authorization mode. AshAdmin's client JavaScript read its state cookies tenant, actor...

EUVD-2024-46549

Malicious code in bioql PyPI...

CVE-2024-5322

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3...

CVE-2024-5322

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3...

CVE-2024-5322

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3...

CVE-2024-5322

The CVE-2024-5322 issue affects N-central prior to 2024.3 and enables session rebinding for already authenticated users when Entra SSO is used, potentially bypassing authentication. Reported across multiple feeds (NVD/Red Hat/PT-Security and others) with a high impact (C/H, I/H) and network attac...

CVE-2024-5322 N-central Authentication Bypass via Session Rebinding

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3...

CVE-2024-5322 N-central Authentication Bypass via Session Rebinding

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass. This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3...

N-able N-Central Security Vulnerability

N-able N-Central is a powerful, customizable remote monitoring and management platform from N-able. A security vulnerability previously existed in N-able N-Central version 2024.3, which stemmed from the vulnerability to rebinding of authenticated user sessions when using Entra SSO, which could le...

PT-2024-35667 · N-Central · N-Central

Name of the Vulnerable Software and Affected Versions: N-central versions prior to 2024.3 Description: The issue allows session rebinding of already authenticated users when using Entra SSO, potentially leading to authentication bypass. Recommendations: For versions prior to 2024.3, update to...