Skip to content
OpenAdvisories

Product · web-infra-dev

midscene

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-59804

    Midscene Bridge Server - Session Hijack via Unauthenticated WebSocket

    Midscene Bridge Server through 1.10.3, fixed in commit 86f4118, contains a missing authentication and CORS misconfiguration vulnerability that allows unauthenticated remote attackers to hijack active bridge sessions by opening a cross-origin WebSocket connect…

    web-infra-dev midscene