Filtered by vendor Cendio Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-119744 1 Cendio 1 Thinlinc 2026-11-07 8.8 High
Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client (tlwebaccess) that allows an authenticated attacker to impersonate any other user, including root, by exploiting flaws in multi-step authentication flows such as one-time passwords, login banners, or expired password prompts. Attackers can leverage this authentication bypass during the multi-step login process to gain unauthorized access to other user accounts, including administrative privileges, in versions from 4.1.0 through 4.20.0.