CVE-2026-8672
MediumCVSS 5.1Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
syslink AG Avantra before version 25.3.0 on Linux and Windows uses default passwords. This allows an attacker to try common or default usernames and passwords.
Risk Assessment
An attacker may gain unauthorized access to the Avantra system, potentially leading to control over monitored infrastructure.
Recommendation
Update Avantra to version 25.3.0 or later and change all default passwords to strong, unique ones.
Other vulnerabilities in Avantra
See all- CVE-2026-3873High
The Use of Hard-coded Credentials vulnerability in Avantra allows accessing functionality not properly constrained by ACLs. This issue affects Avantra versions before 25.3.0.
- CVE-2026-8670Critical
Insufficient session expiration in syslink software AG Avantra on Linux and Windows allows reusing session IDs (Session Replay). This issue affects Avantra before version 25.3.1.
- CVE-2026-8673Medium
Unprotected transport of credentials in syslink AG Avantra on Linux and Windows allows sniffing attacks. Affects versions before 25.3.0.
- CVE-2026-8671High
Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure.
Original NVD description (English source)
Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.