https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T11:17:26.013483+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277733 EUVD-2026-277733 2026-10-06T11:17:26.067079+00:00 EUVD-2026-277733 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25101 fkie_cve-2026-25101 2026-10-06T11:17:26.067129+00:00

Bludit allows user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behavior enables an attacker to fix a session ID for a victim and later hijack the authenticated session.

This issue was fixed in version 3.17.2.

 https://cve.radiocsirt.org/vuln/ghsa-fjj5-fj78-h28j GHSA-fjj5-fj78-h28j 2026-10-06T11:17:26.067182+00:00

Bludit allows user's session identifier to be set before authentication. The value of this session ID stays the same after authentication. This behavior enables an attacker to fix a session ID for a victim and later hijack the authenticated session.

This issue was fixed in version 3.17.2.