Advisories · Technology

syslink software AG Avantra.

Every CVE that names syslink software AG Avantra among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-8673 CVE record

CVSS 5.9 Medium

Password re-initialization mechanism sends passwords in plain text
- syslink software AG Avantra
- CWE-523
Not analysed yet 22 May 2026
CVE-2026-8672 CVE record

CVSS 5.1 Medium

Default credentials for internal DB
- syslink software AG Avantra
- CWE-1393
Not analysed yet 22 May 2026
CVE-2026-8671 CVE record

CVSS 7.5 High

Log Files contain encrypted secrets
- syslink software AG Avantra
- Information disclosure
Not analysed yet 22 May 2026
CVE-2026-8670 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Insecure session handling on metrics web server
- syslink software AG Avantra
- Authentication bypass
Not analysed yet 22 May 2026
CVE-2026-3873 CVE record

CVSS 7.2 High

Legacy built-in user account
- syslink software AG Avantra
- Hard-coded credentials
Not analysed yet 13 Mar 2026