CVE-2026-8670

Critical · CVSS 9.6

CVSS: 9.6; nvd
EPSS: 0.22%; 12th pct
KEV: No
Class: kernel local; CWE-613

Description

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.

References

https://support.avantra.com/hc/en-us/articles/5533929912351

Status: profiled · ingested 2026-07-23T18:00:18.000Z