Medium · 5.9 CVE-2026-8673 EUVD-2026-31436GHSA-v88w-jgrg-7946

Password re-initialization mechanism sends passwords in plain text

Published May 22, 2026 · Updated May 22, 2026 · Assigned by NCSC.ch

Description

Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks.

This issue affects Avantra: before 25.3.0.

Vendor	Product	Affected	Fixed
syslink software	Avantra	< 25.3.0	25.3.0