CVE-2026-8670

CRITICAL 9.6CVE-2026-8670 · Published 22/05/2026 · updated 23/07/2026

Package	Affected versions	Patched versions
avantra avantra	`< 25.3.1`	`25.3.1`

Description

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.

References

support.avantra.com/hc/en-us/articles/5533929912351 · Mitigation

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free