CVE-2026-95780
A vulnerability exists in the authentication and session-management mechanisms that may result in access not being fully terminated followin
CVSS
8.1
High
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 10, 2026 · Last modified: Nov 10, 2026
Not enough EPSS history yet.
A vulnerability exists in the authentication and session-management mechanisms that may result in access not being fully terminated following certain account or session state changes. Under specific conditions, a remote user with prior legitimate access could retain access to protected system resources beyond the intended authorization period. Successful exploitation could result in continued unauthorized access.
No related CVEs by CWE or product.