PT-2026-94251

Name of the Vulnerable Software and Affected Versions admin3 version 3.0.0 Description The software fails to invalidate existing sessions when a user account is disabled, which allows attackers to maintain authenticated access with original permissions. Attackers can use bearer tokens issued befo...

PT-2026-93401

Name of the Vulnerable Software and Affected Versions apache-airflow-providers-fab versions prior to 3.9.0 Description Resetting a user password fails to delete existing database-backed sessions when using the FAB auth manager with fab session backend=database. This occurs because the cleanup...

PT-2026-93402

Name of the Vulnerable Software and Affected Versions apache-airflow-providers-fab versions prior to 3.9.0 Description Changing a user password via the Admin user-edit PATCH endpoint fails to invalidate existing database-backed sessions. This allows an attacker possessing a victim's session cooki...

EUVD-2026-78768

Hydro is a next-generation high-performance online judge platform. From 4.10.4 until 5.0.2, the session recreation logic in packages/hydrooj/src/service/layers/base.ts creates a replacement session token without deleting the previous token from the server-side session token store, so an old sid...

CVE-2026-45048 OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session...

CVE-2026-45048

Open Access Management OpenAM is an access management solution. Prior to 16.1.1, SessionRequestHandler in the session management endpoint does not enforce ownership or privilege checks when a low-privileged authenticated user queries session information in deployments using stateful session...

CVE-2026-88262

Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1...

CVE-2026-88262

Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass. This issue affects xClick: R2, R3, and R3.1...

SecureForce

SecureForce - 침투 테스트 프레임워크 승인된 보안 테스트 및 경쟁 분석을 위해 구축된 단순하지만 강력한 침투 테스트 프레임워크입니다. SecureForce는 익스플로잇 관리, 페이로드 생성 및 통제된 공격 실행을 위한 직관적인 인터페이스를 제공합니다. 기능 익스플로잇 라이브러리 : 다양한 취약점에 대한 체계적인 익스플로잇 모듈 페이로드 생성 : 다중 형식 페이로드 생성 셸코드, 리버스 셸 등 대화형 콘솔 : 공격 오케스트레이션을 위한 명령 기반 인터페이스 모듈형 아키텍처 : 사용자 정의 익스플로잇 및 페이로드로 쉽게...

CVE-2026-81906: Authentication Bypass Using an Alternate Path or Channel

Concrete CMS OAuth callback login path prior to version 9.5.3 did not check whether an account was active or email-validated before establishing a session. A deactivated or unvalidated user with an existing OAuth binding could complete authentication and receive a session that was fully...

EUVD-2026-75541

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. From 0.8.0 until 0.11.1, Open WebUI's OAuth token exchange endpoint issues a session for a provider access token without running the OAuth role management that the normal OAuth login callback runs. A user whose...

DAEnetIP4 METO v1.25 - Session Hijacking

DAEnetIP4 METO v1.25 contains improper session management in the /loginok.htm endpoint, letting attackers hijack sessions, exploit requires attacker to control or intercept session tokens. id: CVE-2025-28242 info: name: DAEnetIP4 METO v1.25 - Session Hijacking author: 0xAkoko severity: high...

BASM (Broken Authentication & Session Management) Netty Dependency in Bitbucket Data Center and Server

This High severity BASM Broken Authentication & Session Management vulnerability known as CVE-2026-50010 was introduced in 9.0.1 and later of Bitbucket Data Center and Server. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...

CVE-2026-67281: Access of Uninitialized Pointer

RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. An unauthenticated attacker can prepare the allocator so that the file-serving path dereferences th...

CVE-2026-85105

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was...

CVE-2026-85105 NousResearch hermes-agent Session Management s71.py _sess_nowait authorization

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was...

EUVD-2026-70388

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was...

CVE-2026-85105

A remote authorization bypass vulnerability exists in NousResearch hermes-agent 0.18.0 , specifically in the _sess_nowait function of the s71.py file within the Session Management component. The root cause is improper handling of the session_id argument, allowing an unauthenticated remote attacke...

CVE-2026-85105 NousResearch hermes-agent Session Management s71.py _sess_nowait authorization

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was...

CVE-2026-85105: Authorization Bypass Through User-Controlled Key

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is the function sessnowait of the file s71.py of the component Session Management. This manipulation of the argument sessionid causes authorization bypass. The attack can be initiated remotely. The vendor was...