BVA

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

BVA records in CISA KEV

No BVA vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Concierge · all components

TI-2026-02070 CVE-2026-2439 · GHSA-9gww-cr64-679c

MEDIUM 49

Concierge::Sessions versions from 0.8.1 before 0.8.5 for Perl generate insecure session ids.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00468 Published 2026-02-16 Fixed in 0.8.5 CWE-338