Security Advisory

CVE-2026-14948

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-20 08:19:00
Last updated 2026-08-20 15:26:27
Assigner CERTVDE
CVSS score 8.8
State PUBLISHED

Description

A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives.