CVE-2026-119744

Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client tlwebaccess that allows an authenticated attacker to impersonate any other user, including root, by exploiting flaws in multi-step authentication flows such as one-time passwords, login banners, or...

EUVD-2026-117529

Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client tlwebaccess that allows an authenticated attacker to impersonate any other user, including root, by exploiting flaws in multi-step authentication flows such as one-time passwords, login banners, or...

CVE-2026-119744

Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client (tlwebaccess ) affecting versions 4.1.0 through 4.20.0 . An authenticated attacker can impersonate any other user, including root , by exploiting flaws in multi-step authentication flows such as one-...

CVE-2026-119744 Cendio ThinLinc Improper Authentication via Web Access

Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client tlwebaccess that allows an authenticated attacker to impersonate any other user, including root, by exploiting flaws in multi-step authentication flows such as one-time passwords, login banners, or...