ArticaTech CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH ArticaTech CVE published 2026-07-28

CVE-2026-66745

CVE-2026-66745 is a session fixation vulnerability in Artica Proxy before 4.50.000000 Service Pack 7. An unauthenticated attacker can set a known PHPSESSID on a victim's browser prior to authentication, allowing the attacker to hijack administrative sessions after the victim authenticates through fw.login.php. This vulnerability allows attackers to gain a fully authenticated administrative session on port [truncated]