A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live… (CVE-2026-14948)
CVE-2026-14948 is a high-severity vulnerability that allows a low privileged remote attacker to hijack an active administrative session without knowing the administrator password. The attacker can extract live plaintext session identifiers from downloadable error log archives, enabling unauthorized access to authenticated sessions.
AI Analysis
Technical Summary
This vulnerability involves the exposure of live plaintext session identifiers for authenticated users within downloadable error log archives. A low privileged remote attacker can leverage these exposed session tokens to hijack active administrative sessions without needing the administrator's password. The vulnerability is categorized under CWE-532, indicating exposure of sensitive information in logs. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability with low attack complexity and no user interaction required.
Potential Impact
An attacker exploiting this vulnerability can gain unauthorized administrative access by hijacking active sessions, potentially leading to full system compromise. The exposure of session identifiers in error logs compromises confidentiality and integrity, and can disrupt availability through unauthorized administrative actions.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to error log archives to trusted users only and avoid exposing logs containing sensitive session information. Monitor vendor advisories for updates on patches or official mitigations.
A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live… (CVE-2026-14948)
Description
CVE-2026-14948 is a high-severity vulnerability that allows a low privileged remote attacker to hijack an active administrative session without knowing the administrator password. The attacker can extract live plaintext session identifiers from downloadable error log archives, enabling unauthorized access to authenticated sessions.
CVSS v3.1
Score 8.8high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves the exposure of live plaintext session identifiers for authenticated users within downloadable error log archives. A low privileged remote attacker can leverage these exposed session tokens to hijack active administrative sessions without needing the administrator's password. The vulnerability is categorized under CWE-532, indicating exposure of sensitive information in logs. The CVSS 3.1 base score is 8.8, reflecting high impact on confidentiality, integrity, and availability with low attack complexity and no user interaction required.
Potential Impact
An attacker exploiting this vulnerability can gain unauthorized administrative access by hijacking active sessions, potentially leading to full system compromise. The exposure of session identifiers in error logs compromises confidentiality and integrity, and can disrupt availability through unauthorized administrative actions.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to error log archives to trusted users only and avoid exposing logs containing sensitive session information. Monitor vendor advisories for updates on patches or official mitigations.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-hvh9-4462-hhv5
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-14948"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Threat ID: 6a870a53acd9273b49b585e9
Added to database: 08/20/2026, 14:08:19 UTC
Last enriched: 08/20/2026, 14:18:42 UTC
Last updated: 08/20/2026, 20:51:58 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.