Critical · 9.6 CVE-2026-8670 EUVD-2026-31435GHSA-rvw7-wx4g-rq78

Insecure session handling on metrics web server

Published May 22, 2026 · Updated May 22, 2026 · Assigned by NCSC.ch

Description

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay).

This issue affects Avantra: before 25.3.1.

Vendor	Product	Affected	Fixed
syslink software	Avantra	< 25.3.1	25.3.1