CVE-2026-8671
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure.
Risk Assessment
Sensitive data may be exposed in logs, leading to confidentiality breaches and further attacks.
Recommendation
Update Avantra to version 25.3.0 or later.
Other vulnerabilities in Avantra
See all- CVE-2026-3873High
The Use of Hard-coded Credentials vulnerability in Avantra allows accessing functionality not properly constrained by ACLs. This issue affects Avantra versions before 25.3.0.
- CVE-2026-8670Critical
Insufficient session expiration in syslink software AG Avantra on Linux and Windows allows reusing session IDs (Session Replay). This issue affects Avantra before version 25.3.1.
- CVE-2026-8673Medium
Unprotected transport of credentials in syslink AG Avantra on Linux and Windows allows sniffing attacks. Affects versions before 25.3.0.
- CVE-2026-8672Medium
syslink AG Avantra before version 25.3.0 on Linux and Windows uses default passwords. This allows an attacker to try common or default usernames and passwords.
Original NVD description (English source)
Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure. This issue affects Avantra: before 25.3.0.