CVE-2026-16970: CVE-2026-16970: güvenlik açığı

Açıklama (NVD)

The IRIS web application in version 2.4.26 and possibly others contains a logout functionality which is ineffective. Stolen session cookies can therefore be misused for a long time.

Özet bilgiler

CVSS v3.1

4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,22 (yüzdelik 12)

CWE

CWE-613

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• www.openwall.com
• github.com
• CWE-613