syslink software AG Avantra vulnerabilities

Latest syslink software AG Avantra CVEs

Newest publication first

1. CVE-2026-8673 Password re-initialization mechanism sends passwords in plain text

   Published 2026-05-22

   Critical·CVSS 9.1 EPSS 0.19%

   Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks. This issue affects Avantra: before 25.3.0.

2. CVE-2026-8672 Default credentials for internal DB

   Published 2026-05-22

   Medium·CVSS 5.1 EPSS 0.11%

   Use of default password vulnerability in syslink software AG Avantra on Linux, Windows allows Try Common or Default Usernames and Passwords. This issue affects Avantra: before 25.3.0.

3. CVE-2026-8671 Log Files contain encrypted secrets

   Published 2026-05-22

   High·CVSS 7.5 EPSS 0.22%

   Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure. This issue affects Avantra: before 25.3.0.

4. CVE-2026-8670 Insecure session handling on metrics web server

   Published 2026-05-22

   Critical·CVSS 9.6 EPSS 0.22%

   Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.

5. CVE-2026-3873 Legacy built-in user account

   Published 2026-03-13

   High·CVSS 7.2 EPSS 0.23%

   Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.