EUVD-2026-41857

Authentication Bypass by Spoofing vulnerability in Apache IoTDB. Certain Thrift RPC query handlers lack strict validation of the sessionId parameter. An attacker can construct requests with a forged sessionId and, without performing openSession authentication, receive valid query results. This...

PT-2021-21222

Name of the Vulnerable Software and Affected Versions Dell Networking X-Series firmware versions prior to 3.0.1.8 Description The issue allows a remote unauthenticated attacker to potentially hijack a session and access the webserver by forging the session ID. This is due to an authentication...