CVE-2026-120200

Nexterm versions through 1.2.2-BETA are vulnerable to a missing authorization flaw in the server session lifecycle routes. This vulnerability allows an authenticated attacker who obtains a session ID to call the hibernate , resume , or DELETE connection endpoints. Consequently, an attacker can di...

CVE-2026-120200 Nexterm through 1.2.2-BETA Missing Authorization in Server Session Lifecycle Routes

Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to hibernate, resume, or terminate other users' remote sessions via session lifecycle routes. Attackers who obtain a session ID can call the hibernate, resume, or DELETE connection endpoints ...

EUVD-2026-114721

Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to hibernate, resume, or terminate other users' remote sessions via session lifecycle routes. Attackers who obtain a session ID can call the hibernate, resume, or DELETE connection endpoints ...

CVE-2026-120200: gnmyt Nexterm: Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to hibernate,…

Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to hibernate, resume, or terminate other users' remote sessions via session lifecycle routes. Attackers who obtain a session ID can call the hibernate, resume, or DELETE connection endpoints ...