CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-10-31
Nexterm through 1.2.2-BETA Missing Authorization in Server Session Lifecycle Routes (CVE-2026-120200)
[Affected Scope] All deployments running Nexterm through version 1.2.2-BETA
[Impact] Authenticated attackers can disrupt, hibernate, resume, or terminate active SSH, RDP, VNC, or SFTP sessions of other users by exploiting missing authorization checks on session lifecycle routes
[Mitigation] Immediately upgrade to the patched version of Nexterm and restrict access to session management API endpoints