Avantra vulnerabilities
5 known CVE vulnerabilities in Avantra, translated and rated.
- CVE-2026-3873High
The Use of Hard-coded Credentials vulnerability in Avantra allows accessing functionality not properly constrained by ACLs. This issue affects Avantra versions before 25.3.0.
- CVE-2026-8670Critical
Insufficient session expiration in syslink software AG Avantra on Linux and Windows allows reusing session IDs (Session Replay). This issue affects Avantra before version 25.3.1.
- CVE-2026-8673Medium
Unprotected transport of credentials in syslink AG Avantra on Linux and Windows allows sniffing attacks. Affects versions before 25.3.0.
- CVE-2026-8672Medium
syslink AG Avantra before version 25.3.0 on Linux and Windows uses default passwords. This allows an attacker to try common or default usernames and passwords.
- CVE-2026-8671High
Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure.