CVE-2026-8673 - Password re-initialization mechanism sends passwords in plain text

Back Back to CVE browser

CRITICAL

Password re-initialization mechanism sends passwords in plain text

Published May 22, 2026

9.1

CRITICAL

CVSS 3.1

EPSS 0.33%

Description

Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks.

This issue affects Avantra: before 25.3.0.

Affected products

Vendor syslink software AG Product Avantra Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <25.3.0

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

syslink software AG

Avantra

unaffected

Version	Status	Constraints
0	affected	<25.3.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-523

References (1)

https://support.avantra.com/hc/en-us/articles/5535621927071
vendor-advisoryMitigationVendor Advisory

Link	Providers	Tags
https://support.avantra.com/hc/en-us/articles/5535621927071		vendor-advisoryMitigationVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner NCSC.ch

Published May 22, 2026

Updated May 22, 2026

Reserved May 15, 2026

Link CVE-2026-8673

CISA Vulnrichment

Updated May 22, 2026

NVD

Status Analyzed

Modified Jul 23, 2026

Link CVE-2026-8673

Red Hat

Severity n/a

Public date n/a

Links CVE-2026-8673