Unrated severityNVD Advisory· Published Jan 28, 2026· Updated Jan 29, 2026
CVE-2025-69602
CVE-2025-69602
Description
A session fixation vulnerability exists in 66biolinks v62.0.0 by AltumCode, where the application does not regenerate the session identifier after successful authentication. As a result, the same session cookie value is reused for users logging in from the same browser, allowing an attacker who can set or predict a session ID to potentially hijack an authenticated session.
Affected products
2- AltumCode/66biolinksdescription
- Range: = 62.0.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.