CVE-2026-8673
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
Unprotected transport of credentials in syslink AG Avantra on Linux and Windows allows sniffing attacks. Affects versions before 25.3.0.
Risk Assessment
Attackers can intercept login credentials, leading to unauthorized system access and potential data theft.
Recommendation
Immediately update Avantra to version 25.3.0 or later and enforce encrypted transport (e.g., TLS).
Other vulnerabilities in Avantra
See all- CVE-2026-3873High
The Use of Hard-coded Credentials vulnerability in Avantra allows accessing functionality not properly constrained by ACLs. This issue affects Avantra versions before 25.3.0.
- CVE-2026-8670Critical
Insufficient session expiration in syslink software AG Avantra on Linux and Windows allows reusing session IDs (Session Replay). This issue affects Avantra before version 25.3.1.
- CVE-2026-8672Medium
syslink AG Avantra before version 25.3.0 on Linux and Windows uses default passwords. This allows an attacker to try common or default usernames and passwords.
- CVE-2026-8671High
Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure.
Original NVD description (English source)
Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks. This issue affects Avantra: before 25.3.0.