CVE-2026-8670

Insecure session handling on metrics web server PUBLISHED

Description (CNA)

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.

Affected (CNA)

Vendor / product	Versions
syslink software AG / Avantra	affected 0 before 25.3.1

CWE

CWE-613

References

https://support.avantra.com/hc/en-us/articles/5533929912351

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.