syslink software AG

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

syslink software AG records in CISA KEV

No syslink software AG vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Avantra · all components

TI-2026-07619 CVE-2026-8670 · GHSA-rvw7-wx4g-rq78

MEDIUM 42

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00216 Published 2026-05-22 Fixed in 25.3.1 CWE-613

TI-2026-07622 CVE-2026-8673 · GHSA-v88w-jgrg-7946

MEDIUM 41

Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00192 Published 2026-05-22 Fixed in 25.3.0 CWE-523

TI-2026-07620 CVE-2026-8671 · GHSA-5qp4-pv6p-8gcx

LOW 32

Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure.

CVSS 3.1HIGH 7.5 Adjacent network High privileges No interaction EPSS 0.00216 Published 2026-05-22 Fixed in 25.3.0 CWE-532

TI-2026-07621 CVE-2026-8672 · GHSA-hhj7-5v62-787q

LOW 22

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords.

CVSS 3.1MEDIUM 5.1 Local High privileges No interaction EPSS 0.00105 Published 2026-05-22 Fixed in 25.3.0 CWE-1393