Avantra vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Avantra products: 4 record(s), with severity, exploitation and fixes.

Exploited only (KEV) →

CVE-2026-8673 Critical · 9.1 CWE-523 May 22, 2026

Password re-initialization mechanism sends passwords in plain text

Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks. This issue affects Avantra: before 25.3.0.

CVE-2026-8672 Medium · 5.1 CWE-1393 May 22, 2026

Default credentials for internal DB

Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.

CVE-2026-8671 High · 7.5 CWE-532 May 22, 2026

Log Files contain encrypted secrets

Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure. This issue affects Avantra: before 25.3.0.

CVE-2026-8670 Critical · 9.6 CWE-613 May 22, 2026

Insecure session handling on metrics web server

Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.