Vulnerabilities

TI-2026-07622 CVE-2026-8673 · GHSA-v88w-jgrg-7946

Password re-initialization mechanism sends passwords in plain text

MEDIUM 41

Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00192 Published 2026-05-22 Fixed in 25.3.0 CWE-523

TI-2026-07621 CVE-2026-8672 · GHSA-hhj7-5v62-787q

LOW 22

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords.

CVSS 3.1MEDIUM 5.1 Local High privileges No interaction EPSS 0.00105 Published 2026-05-22 Fixed in 25.3.0 CWE-1393

TI-2026-07620 CVE-2026-8671 · GHSA-5qp4-pv6p-8gcx

LOW 32

Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure.

CVSS 3.1HIGH 7.5 Adjacent network High privileges No interaction EPSS 0.00216 Published 2026-05-22 Fixed in 25.3.0 CWE-532

TI-2026-07619 CVE-2026-8670 · GHSA-rvw7-wx4g-rq78

MEDIUM 42

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay).

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00216 Published 2026-05-22 Fixed in 25.3.1 CWE-613