CVE-2026-8670

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-8670
Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.

9.6 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References
Link Resource
https://support.avantra.com/hc/en-us/articles/5533929912351 Mitigation Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:a:avantra:avantra:*:*:*:*:*:*:*:*
OR cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
History

02 Jun 2026, 15:01

Type Values Removed Values Added
First Time Linux
Microsoft
Avantra
Linux linux Kernel
Microsoft windows
Avantra avantra
References () https://support.avantra.com/hc/en-us/articles/5533929912351 - () https://support.avantra.com/hc/en-us/articles/5533929912351 - Mitigation, Vendor Advisory
CPE cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:a:avantra:avantra:*:*:*:*:*:*:*:*

22 May 2026, 16:32

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-22 14:16

Updated : 2026-06-02 15:01

NVD link : CVE-2026-8670

Mitre link : CVE-2026-8670

CVE.ORG link : CVE-2026-8670

JSON object : View

Products Affected

microsoft

  • windows

avantra

  • avantra

linux

  • linux_kernel
CWE
CWE-613

Insufficient Session Expiration