https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:57:11.953556+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331393 EUVD-2026-331393 2026-10-07T21:57:12.006788+00:00 EUVD-2026-331393 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35095 fkie_cve-2026-35095 2026-10-07T21:57:12.006828+00:00

KTM System e-BOK allows the session identifier to be set by the client prior to authentication. If a cookie with a valid name is set, its value remains unchanged after successful login. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session.

This issue was fixed in the patch published in June 2026.

 https://cve.radiocsirt.org/vuln/ghsa-7vjj-gwc4-wgq7 GHSA-7vjj-gwc4-wgq7 2026-10-07T21:57:12.006863+00:00

KTM System e-BOK allows the session identifier to be set by the client prior to authentication. If a cookie with a valid name is set, its value remains unchanged after successful login. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session.

This issue was fixed in the patch published in June 2026.