CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Nexterm through 1.2.2-BETA Missing Authorization in Server Session Lifecycle Routes (CVE-2026-120200)
[Affected Scope] All deployments running Nexterm through version 1.2.2-BETA
[Impact] Authenticated attackers can disrupt, hibernate, resume, or terminate active SSH, RDP, VNC, or SFTP sessions of other users by exploiting missing authorization checks on session lifecycle routes
[Mitigation] Immediately upgrade to the patched version of Nexterm and restrict access to session management API endpoints
Dassault Systemes DELMIA Apriso Missing Authorization Vulnerability (CVE-2025-6205) Analysis and Mitigation Guide
[Affected Scope] DELMIA Apriso from Release 2020 through Release 2025
[Impact] Unauthenticated remote attackers can bypass authorization checks to gain privileged access to the application
[Mitigation] Apply official security patches immediately, restrict external access, and enforce IP-based access control lists