CVE-2026-119744

A flaw was found in ThinLinc. The browser-based web client fails to properly validate authentication state during multi-step login procedures, such as one-time password prompts or login notices. An authenticated attacker can exploit this flaw to bypass authentication controls and impersonate any...

CVE-2026-119744

Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client tlwebaccess that allows an authenticated attacker to impersonate any other user, including root, by exploiting flaws in multi-step authentication flows such as one-time passwords, login banners, or...

EUVD-2026-117529

Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client tlwebaccess that allows an authenticated attacker to impersonate any other user, including root, by exploiting flaws in multi-step authentication flows such as one-time passwords, login banners, or...

CVE-2026-119744

Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client (tlwebaccess ) affecting versions 4.1.0 through 4.20.0 . An authenticated attacker can impersonate any other user, including root , by exploiting flaws in multi-step authentication flows such as one-...

CVE-2026-119744 Cendio ThinLinc Improper Authentication via Web Access

Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client tlwebaccess that allows an authenticated attacker to impersonate any other user, including root, by exploiting flaws in multi-step authentication flows such as one-time passwords, login banners, or...