https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:28:26.264832+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-256933 EUVD-2026-256933 2026-10-06T07:28:26.330843+00:00 EUVD-2026-256933 https://cve.radiocsirt.org/vuln/fkie_cve-2025-60425 fkie_cve-2025-60425 2026-10-06T07:28:26.330886+00:00

Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attackers to perform a session hijacking attack.

 https://cve.radiocsirt.org/vuln/ghsa-5w58-vmv5-p957 GHSA-5w58-vmv5-p957 2026-10-06T07:28:26.330920+00:00

Nagios Fusion v2024R1.2 and v2024R2 does not invalidate already existing session tokens when the two-factor authentication mechanism is enabled, allowing attackers to perform a session hijacking attack.