CVE-2026-8670

—

CVSS 3.1

9.6 critical

EPSS

<1%p12

Published

May 22, 2026 (May 22, 2026)

Modified

Jul 23, 2026

Description

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.

Vendors: avantra
Products: avantra
Weakness: CWE-613
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.