CVE-2026-81576

CodeMeter Runtime (WIBU), when configured as a server in versions before 8.41a and 9.10 , issues a per-connection session handle and relies on a cryptographically weak SID as the sole authenticator. An attacker with network access can brute-force the SID , recover another session's handle number,...