https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 17:41:12 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-14705 bdu:2025-14705 https://cve.radiocsirt.org/vuln/bdu:2025-14705 https://cve.radiocsirt.org/vuln/euvd-2026-379502 EUVD-2026-379502 https://cve.radiocsirt.org/vuln/euvd-2026-379502 https://cve.radiocsirt.org/vuln/fkie_cve-2024-13996 <p>Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user&#39;s password was changed. As a result, any pre-existing sessions (including those potentially controlled by an attacker) remained valid after a credential update. This insufficient session expiration could allow continued unauthorized access to user data and actions even after a password change.</p> <p>Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user&#39;s password was changed. As a result, any pre-existing sessions (including those potentially controlled by an attacker) remained valid after a credential update. This insufficient session expiration could allow continued unauthorized access to user data and actions even after a password change.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-13996 https://cve.radiocsirt.org/vuln/ghsa-7429-79p7-vgcx <p>Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user&#39;s password was changed. As a result, any pre-existing sessions (including those potentially controlled by an attacker) remained valid after a credential update. This insufficient session expiration could allow continued unauthorized access to user data and actions even after a password change.</p> <p>Nagios XI versions prior to 2024R1.1.3 did not invalidate all other active sessions for a user when that user&#39;s password was changed. As a result, any pre-existing sessions (including those potentially controlled by an attacker) remained valid after a credential update. This insufficient session expiration could allow continued unauthorized access to user data and actions even after a password change.</p> https://cve.radiocsirt.org/vuln/ghsa-7429-79p7-vgcx