Missing Authorization Vulnerability in Nexterm Remote Session Management

CVE-2026-120200

What is CVE-2026-120200?

Nexterm versions up to 1.2.2-BETA are affected by a missing authorization vulnerability which permits authenticated users to manipulate the remote sessions of other users. Specifically, this flaw allows attackers with access to a valid session ID to execute commands that can hibernate, resume, or terminate active sessions, impacting protocols such as SSH, RDP, VNC, and SFTP. It is essential to address this issue to protect user sessions from unauthorized disruptions.

References