Medium severity6.8NVD Advisory· Published Sep 15, 2026· Updated Sep 18, 2026
CVE-2026-66372
CVE-2026-66372
Description
The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2Patches
Vulnerability mechanics
References
3News mentions
2- Cisagov: Six Auth Bypass and Privilege Escalation Flaws Disclosed TogetherVypr Intelligence · Sep 15, 2026
- Digital Watchdog VMAX DVR and NVR Product LineupsCISA ICS Advisories