CVE-2026-34917

Name of the Vulnerable Software and Affected Versions The product name cannot be determined (affected versions not specified)

Description Low-privileged session IDs generated for the web admin console can be reused in the XML-RPC API, an interface typically restricted to administrative users. This allows an attacker to gain unauthorized access and exploit API-level issues. The flaw exists because the system does not distinguish between the session context of the web interface and the API.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.