FR

live

CVE-2025-15662 · CVSS 8.6 CVE-2025-50455 · CVSS 9.1 CVE-2025-59172 · CVSS 8.5 CVE-2025-68686 · Fortinet FortiOS

weakness type

CWE-384

The session identifier is not renewed at login, so an attacker reuses one they planted.

1: vulnerability tracked
1 July 2026: latest publication

Most affected vendors

cve

Vulnerability watch

idvulnerabilityseveritypublished

CVE-2026-13707Session fixation vulnerability in Wikimedia Foundation OAuth. This vulnerability is associated with program files src/Backend/MWOAuthServer.Php. This issue affects OAuth: from * through 1.46.0, 1.45.4, 1.44.6, 1.43.9.Mediawiki High CVSS 7.6 01/07