PT-2026-48659 · Unknown · Twin Gatus

Geochen · CVE-2026-11956 · Published 2026-06-11 · Updated 2026-06-11

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X

Name of the Vulnerable Software and Affected Versions TwiN gatus version 5.36.0

Description A flaw exists in the OIDC Session Cookie Handler component within the setSessionCookie() function of the security/oidc.go file. A remote attacker can perform a high-complexity manipulation to cause sensitive cookies to be issued without the secure attribute, which ensures cookies are only transmitted over encrypted connections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-614

CWE-1004

Related Identifiers

CVE-2026-11956

Affected Products

Twin Gatus

References · 11

• 🔥 https://github.com/TwiN/gatus/issues/1689 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/11xxx/CVE-2026-11956.json · Exploit
• 🔥 https://vuldb.com/submit/836328 · Exploit
• https://osv.dev/vulnerability/CVE-2026-11956 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-11956 · Security Note
• https://vuldb.com/cve/CVE-2026-11956 · Note
• https://twitter.com/CVEnew/status/2065087718502085058 · Twitter Post
• https://vuldb.com/vuln/370343/cti · Note
• https://t.me/CVEtracker/56561 · Telegram Post
• https://github.com/TwiN/gatus · Note
• https://vuldb.com/vuln/370343 · Note