MEDIUM
gnmyt
CVE published 2026-10-31
CVE-2026-120200
A missing authorization vulnerability in Nexterm through 1.2.2-BETA allows authenticated users to hibernate, resume, or terminate other users' remote sessions via session lifecycle routes. This vulnerability impacts remote session management, potentially disrupting live SSH, RDP, VNC, or SFTP sessions. System administrators and defenders should assess exposure and prioritize mitigation to prevent unauthor [truncated]