PT-2026-42761 · Syslink Software Ag · Avantra

Vicxer Inc · Published 2026-05-22 · Updated 2026-05-22 · CVE-2026-8670

Mitre

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay).

This issue affects Avantra: before 25.3.1.

Fix

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2026-8670

Affected Products

Avantra

References · 1

• https://support.avantra.com/hc/en-us/articles/5533929912351 · Vendor Advisory