CVE-2026-2337

High

Published: 11/02/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

A vulnerability in Plunet BusinessManager allows session hijacking, data theft, and unauthorized actions on behalf of the user. The issue affects version 10.15.1.

Risk Assessment

An attacker can take over a user's session, leading to data confidentiality breaches and integrity issues in business operations. Immediate system update is required.

Recommendation

Update Plunet BusinessManager to the latest available version that includes the security fix. Additionally, implement session monitoring and strengthen authentication mechanisms.

Other vulnerabilities in Plunet BusinessManager

CVE-2026-2344High
A vulnerability in Plunet BusinessManager allows unauthorized actions being performed on behalf of privileged users. This issue affects Plunet BusinessManager: 10.15.1.

Original NVD description (English source)

A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of the user.This issue affects Plunet BusinessManager: 10.15.1.