Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2026-8670

Insecure session handling on metrics web server

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.

CVSS 3.1 · 9.6 Critical EPSS < 1% KEV · Not listed
Vendors
Avantra Linux Microsoft and 1 more
Products
Avantra Linux Kernel Windows and 1 more
CVE-2026-8671

Log Files contain encrypted secrets

Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure. This issue affects Avantra: before 25.3.0.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Avantra Linux Microsoft and 1 more
Products
Avantra Linux Kernel Windows and 1 more
CVE-2026-8672

Default credentials for internal DB

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.

CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Avantra Linux Microsoft and 1 more
Products
Avantra Linux Kernel Windows and 1 more
CVE-2026-8673

Password re-initialization mechanism sends passwords in plain text

Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks. This issue affects Avantra: before 25.3.0.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Avantra Linux Microsoft and 1 more
Products
Avantra Linux Kernel Windows and 1 more
CVE-2026-3873

Legacy built-in user account

Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Syslink Software Ag
Products
Avantra