CVE-2026-14948Disclosure

LOWCVSS 8.7 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session identifiers for authenticated users from downloadable error log archives.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://www.certvde.com/en/advisories/VDE-2026-078/

Weakness type (CWE)

CWE-532

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-14948

Full discourse1 post

CVE@CVEnew46d
Disclosure
CVE-2026-14948 A low privileged remote attacker can hijack an active administrative session without needing to know the administrator password by extracting live plaintext session i… https://www.cve.org/CVERecord?id=CVE-2026-14948
Post summary
The post briefly describes a CVE that allows low‑privileged remote attackers to hijack administrative sessions by extracting plaintext session data, without offering any PoC, exploit, or patch information.
00000811
58.0K followersView on X

Explore more

Back to dashboard