VYPR

Nexterm

by Gnmyt

CVEs (1)

  • CVE-2026-120200MedOct 31, 2026
    risk 0.28cvss 5.4epss —

    Nexterm through 1.2.2-BETA contains a missing authorization vulnerability that allows authenticated users to hibernate, resume, or terminate other users' remote sessions via session lifecycle routes. Attackers who obtain a session ID can call the hibernate, resume, or DELETE…