Security Advisory

CVE-2026-12581

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-22 09:30:38
Last updated 2026-06-22 10:26:23
Assigner twcert
CVSS score 7.7
State PUBLISHED

Description

EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote attackers replace a specific session ID for a user, they can gain the user's privilege once the user logs in.