CVE-2026-8670

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.

Score

CVSS 3.1 9.6 Critical

Status

Analyzed - vulnerability@ncsc.ch

Published

2026-05-22

Last modified

2026-05-22

Weaknesses

CWE-613

Affected products

• Avantra (Avantra)
• Avantra (Syslink Software Ag)

References

• https://support.avantra.com/hc/en-us/articles/5533929912351