Session ID Reuse Vulnerability in Web Admin Console of Affected Product by Vendor

CVE-2026-34917

What is CVE-2026-34917?

A session ID reuse vulnerability exists in the web admin console of the affected product, allowing low-privileged session IDs to be exploited via the XML-RPC API. This API typically restricts access to admin users; however, an unauthorized attacker may leverage these session IDs to gain access to sensitive API functionalities. The updated session context records now prevent the interchangeability of session IDs between web and API sessions, enhancing security measures.

References