CVE-2026-120200

Nexterm versions through 1.2.2-BETA are vulnerable to a missing authorization flaw in the server session lifecycle routes. This vulnerability allows an authenticated attacker who obtains a session ID to call the hibernate , resume , or DELETE connection endpoints. Consequently, an attacker can di...