Threats tagged 'ghsa-5q2r-xq89-8ccv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.3	CVE-2026-116894REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account Low2.32026-10-27GCVE DatabaseCVE-2026-116894 REDAXO versions prior to 5.21.5 have a vulnerability related to insufficient session expiration. This flaw allows attackers who have obtained a user's session ID or stay-logged-in cookie to maintain backend access even after the user changes their password. The stay-logged-in cookie remains valid for up to three months, enabling prolonged unauthorized access. Report on CVE-2026-116894 Vulnerability CWE-613 #ghsa-5q2r-xq89-8ccv	GCVE Database	2026-10-27

Page 1 of 1