CVE-2026-35095

MediumCVSS 4.8/10Last modified Oct 25, 2026

Description

KTM System e-BOK allows the session identifier to be set by the client prior to authentication. If a cookie with a valid name is set, its value remains unchanged after successful login. This behaviour enables an attacker to fix a session ID for a victim and later hijack the authenticated session.

This issue was fixed in the patch published in June 2026.

Metrics

CVSS 4.0 4.8/10

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-384

Affected software

Vendor	Product	Versions
KTM System	e-BOK	< 06.2026

References

Timeline

Published: Jun 30, 2026
Last modified: Oct 25, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-350965.1KTM System e-BOK is vulnerable to Cross‑Site Request Forgery (CSRF) in both the email-change and password-change functionalities. An attacke CVE-2026-350976.9KTM System e-BOK enforces a maximum password length of six numeric digits and does not permit the use of any alphabetic, special, or extende CVE-2026-350986.9KTM System e-BOK does not implement any limit or timeout on consecutive login attempts, allowing an attacker to perform unlimited authentica CVE-2026-350997.4Lakeside SysTrack Agent 11 before 11.5.0.15 has a race condition with resultant local privilege escalation to SYSTEM. The fixed versions are CVE-2026-351024.7HCL AION is affected by an open redirect vulnerability in the navigation bar of the GenAI web interface (Navbar component). The switch-versi CVE-2026-351034.7HCL AION is affected by an open redirect vulnerability on the role assignment pending page (RoleAssignPending component). The redirect to th CVE-2026-351044.7HCL AION is affected by an open redirect vulnerability on the user registration page (Signup component). The redirect performed after regist CVE-2026-351054.7HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface (UserContext component, line CVE-2026-351064.7HCL AION is affected by an open redirect vulnerability in the session-handling logic of the GenAI web interface (UserContext component, line CVE-2026-351074.7HCL AION is affected by an open redirect vulnerability in the user menu of the GenAI web interface (UserMenu component). The redirect to the CVE-2026-351093.7HCL AION is affected by a vulnerability where pages served over HTTPS could be cached by the browser or intermediate proxies. Sensitive info CVE-2026-35118.6Improper Restriction of XML External Entity Reference vulnerability in XMLUtils.java in Slovensko.Digital Autogram allows remote unauthentic