CVE-2026-70454

rsync 3.2.0 through 3.2.3 openssl mode and rsync-ssl through 3.4.4 stunnel mode contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise invalid certificates. Attackers can exploit the failure to valida...

Airflow Session Recording

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow is related to the lack of a mechanism for capturing sessions. Exploiting this vulnerability allows an attacker who operates remotely to intercept a user’s session...

PHP Session Interception

The vulnerability of the PHP interpreter’s sessions subsystem is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to intercept a user’s session...

CmtViewer Session Management Unauthorized Access

The vulnerability of the CmtViewer application for controlling programmable panels is related to session management errors. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access by intercepting the session...