CVE-2025-69602Disclosure(altumcode / 66biolinks)

LOWCVSS 9.1 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A session fixation vulnerability exists in 66biolinks v62.0.0 by AltumCode, where the application does not regenerate the session identifier after successful authentication. As a result, the same session cookie value is reused for users logging in from the same browser, allowing an attacker who can set or predict a session ID to potentially hijack an authenticated session.

altumcode CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://gist.github.com/Waqar-Arain/c8117308325a91b8f3b7829646915275

Weakness type (CWE)

CWE-384

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

66biolinks

Threat summary

2 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
Peaked 1d ago at 1 mentions (2026-01-28); latest day: 1
2 total mentions across 2 days

Affected systems

Vendors

altumcode

Products

66biolinks

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

The Hacker Wire@TheHackerWire252d
Disclosure
🔴 CVE-2025-69602 - Critical A session fixation vulnerability exists in 66biolinks v62.0.0 by AltumCode, where the application does not regenerate the session identifier after successful authentication. As a result, ... https://www.thehackerwire.com/vulnerability/CVE-2025-69602/ https://t.co/9J5qSe8BVa
Post summary
The advisory discloses a session fixation flaw in 66biolinks v62.0.0 that lacks session ID regeneration after login, but offers no evidence of exploits, patches, or active attacks.
0000050
113 followersView on X
CVE@CVEnew253d
Disclosure
CVE-2025-69602 A session fixation vulnerability exists in 66biolinks v62.0.0 by AltumCode, where the application does not regenerate the session identifier after successful authenti… https://www.cve.org/CVERecord?id=CVE-2025-69602
Post summary
CVE-2025-69602 exposes a session fixation flaw in 66biolinks v62.0.0 where the session ID is not regenerated post‑login. No PoC, exploit, patch or active exploitation details are reported.
00000233
56.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	altumcode	66biolinks	62.0.0	-	-

Explore more

Back to dashboard altumcode CVEs 66biolinks vulnerabilities