Skip to contentCWE-613 vulnerabilities
- smartertools smartermailSmarterMail < Build 9777 Stale JWT Role Claim Privilege Escalation via Refresh TokenCVE-2026-1040848.7 High
- apache cxfApache CXF: Inoperative max_age authentication-freshness check in OidcClientCodeRequestFilterCVE-2026-71575Fix available9.1 Critical
- nearform fast-jwtfast-jwt clockTolerance: Infinity silently bypasses both exp and nbf validation (and persists in the verifier cache)CVE-2026-107721Fix available5.9 Medium
- nearform fast-jwtfast-jwt: Verifier cache accepts expired JWTs without iat.CVE-2026-107719Fix available4.2 Medium
- @fastify/jwt@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsedCVE-2026-1072756.8 Medium
- wso2 identity serverPotential brute force vulnerability due to non-expiring SMS OTPsCVE-2024-81225.9 Medium
- wger-project wgerwger: API credentials remain valid after logout/password changeCVE-2026-464374.8 Medium
- wolfsshwolfSSHd on Windows race condition leading to logon token reused across connectionsCVE-2026-83540Fix available7.7 High
- penpotPenpot: Server-side session not invalidated on logout; stale auth-token cookie remains valid for full profile accessCVE-2026-1056905.9 Medium
- monta monta.appMonta monta.app Insufficient Session ExpirationCVE-2026-972126.9 Medium
- yeswikiYesWiki before 4.6.7 Non-Expiring Password Reset Tokens via LostPasswordActionCVE-2026-1044686.3 Medium
- hcl icontrolHCL iControl is affected by a Session Timeout vulnerabilityCVE-2026-662533.1 Low
- tryghost ghostGhost 6.20.0 before 6.57.1 Authentication Bypass via Session HandlingCVE-2026-103283Fix available8.6 High
- tryghost ghostGhost 3.10.0 before 6.34.0 Session Invalidation BypassCVE-2026-103279Fix available7.6 High
- pretixOAuth credentials not disabled when application is disabledCVE-2026-1012712.1 Low
- gz-yami mall4jmall4j through 4.0 Insufficient Session Expiration via Token RefreshCVE-2026-1023675.3 Medium
- suse rancherSession Not Revoked Server-Side on Logout in RancherCVE-2026-888058.1 High
- froxlorfroxlor before 2.3.12 Authentication Bypass via Session PersistenceCVE-2026-1007118.7 High
- cap-go capgo.appCapgo.app before 12.264.5 Upload Expiry Bypass via build uploadCVE-2026-1006245.3 Medium
- openclawOpenClaw before 2026.8.1 Canvas Capability Revocation BypassCVE-2026-1005542.3 Low
- pawelmalak flameFlame through 2.4.0 Admin Token Insufficient Session ExpirationCVE-2026-1005025.9 Medium
- gerritIncorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code ReviewCVE-2026-877207.6 High
- botslab g980hBotslab G980H Dashcams Insufficient session expirationCVE-2026-825668.7 High
- norwegian cruise line door access controlCVE-2026-75907CVE-2026-759077.5 High
- signozSigNoz before 0.143.0 Insufficient Session Expiration Authentication BypassCVE-2026-970567.6 High
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 moreDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an...CVE-2026-735866.4 Medium
- nt-ware uniflow onlineuniFLOW Online Legacy UI Previous login session retained when entering Reduced Function LoginCVE-2026-923784.1 Medium
- hexpmRefresh tokens accepted as private repository credentials at the CDNCVE-2026-866982.3 Low
- broadcom rabbitmq server, rabbitmq rabbitmq-server +1 moreRabbitMQ: OAuth2 is_integer(Exp) guard skips token-expiry checks for float expCVE-2026-67242Fix available6.3 Medium
webpy Debianwebpy web.py 0.76 is vulnerable to Insufficient Session Expiration. The application's session...CVE-2026-793139.8 Critical- 1panel-dev maxkbMaxKB: Expired application API keys remain usable on `/chat/api/mcp`CVE-2026-775195.4 Medium
- apache airflowApache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiryCVE-2026-86473Fix available9.1 Critical
- No product listedA session invalidation flaw exists in x-ui 0.3.2. The full user object is stored in a client-side...CVE-2026-793174.8 Medium
- nvidia taoStored Cross-Site Scripting (XSS) in T-Systems’ TAO 2.0CVE-2026-929765.1 Medium
- ash-project ash authentication phoenix, team-alembic ash authentication +1 moreRevoked session accepted because the session jti is never checked in AshAuthentication and AshAuthentication PhoenixCVE-2026-86533Fix available9.1 Critical
- team-alembic ash authenticationReplayable OAuth2 CSRF state retained after a failed callback in AshAuthenticationCVE-2026-81637Fix available2.3 Low
- cjbi admin3admin3 through 3.0.0 Session Not Invalidated When a User Account Is DisabledCVE-2026-929205.3 Medium
- suitenumerique docsDocs before 5.4.1 Stale Collaboration Session After Access RevocationCVE-2026-928007.6 High
- concrete cms cms, concretecms concrete cms +1 moreConcrete CMS before 9.5.4 allows a deactivated user to retain OAuth-authenticated REST API accessCVE-2026-853872.0 Low
- error311 fileriseFileRise < 3.28.0 Privilege Escalation via WebDAV Session InheritanceCVE-2026-926167.6 High
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB auth manager: deactivated users retain and renew Core API JWT accessCVE-2026-823107.2 High
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessionsCVE-2026-864629.1 Critical
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB password reset never invalidates sessions: string/int _user_id comparison is always falseCVE-2026-823119.8 Critical
- red hat build of keycloak 26.6.8, single sign-on 7 +1 moreKeycloak-services: keycloak-services: residual cross-browser account-link proof allows silent re-linkingCVE-2026-923586.4 Medium
- bizwell xclickInsufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass.
...CVE-2026-882628.7 High
- ibm langflow oss, langflow +1 moreLangflow is vulnerable to authentication bypass and insufficient session expirationCVE-2026-812688.1 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Admin demoted through SSO role sync keeps read and write access to all users' notesCVE-2026-87014Fix available6.5 Medium
- dell secure connect gateway 5.0 - appliance, secure connect gateway 5.0 - application, secure connect gateway +2 moreDell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior...CVE-2026-801745.3 Medium
- macropay-solutions maravel-frameworkMaravel-Framework Token Replay Vulnerability via Premature JWT Blacklist Eviction in Tagged CachesCVE-2026-552508.7 High
- mstfakts college-management-systemMstfakts College-Management-System Logout server.php session expirationCVE-2026-862155.3 Medium
- Show moreLoading…