CVE ID :CVE-2025-36359 Published : June 30, 2026, 8:11 p.m. | 1 hour ago Description :IBM DevOps Automation 1.0.1 and IBM DevOps Loop 1.0.2 does not invalidate session IDs after expiration which could allow an authenticated user to impersonate another user on the system. Severity: 8.1 |...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2025-36359 - IBM DevOps Loop is susceptible to an Insufficient Session Expiration vulnerability.

VERWANDTEARTIKEL

CVE-2026-57995 - phpMyFAQ - Privilege Escalation via Missing Self-Rights Constraint in GroupController::updatePermissions

CVE-2026-56700 - Grav - Multiple Remote Code Execution Vulnerabilities via Unsafe Unserialize and Command Injection

CVE-2026-56300 - Capgo - Unauthenticated API Key Validity and Permission Oracle via RPC Functions

CVE-2026-56286 - Capgo - Account Deletion Without Password Confirmation

CVE-2026-56278 - Flowise - Session Hijacking via Weak Default Express Session Secret

CVE-2026-56264 - Crawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint