Is CVE-2026-71302 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-71302?

CVE-2026-71302 has a CVSS v3 severity of HIGH (7.1).

Back

CVE-2026-71302

Description

The application accepts user-supplied session identifiers and does not regenerate the session ID after authentication. This allows an attacker to predefine a session ID and reuse it after victim authentication, resulting in session takeover.