https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 02:33:14 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-116894 <p>REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in key valid after a password change. Attackers who obtained a user&#39;s session id or stay-logged-in cookie can keep backend access after the password change, via the cookie for up to three months.</p> <p>REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in key valid after a password change. Attackers who obtained a user&#39;s session id or stay-logged-in cookie can keep backend access after the password change, via the cookie for up to three months.</p> https://db.gcve.eu/vuln/fkie_cve-2026-116894 https://db.gcve.eu/vuln/ghsa-5q2r-xq89-8ccv <p>REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in key valid after a password change. Attackers who obtained a user&#39;s session id or stay-logged-in cookie can keep backend access after the password change, via the cookie for up to three months.</p> <p>REDAXO before 5.21.5 contains an insufficient session expiration vulnerability that allows attackers to retain account access by keeping the current session and stay-logged-in key valid after a password change. Attackers who obtained a user&#39;s session id or stay-logged-in cookie can keep backend access after the password change, via the cookie for up to three months.</p> https://db.gcve.eu/vuln/ghsa-5q2r-xq89-8ccv