Cloudanix VulnDB

CVE-2026-18451

Low · 3.1

CVSS

3.1

EPSS

0.2%

Published

Oct 27, 2026

CISA due date

—

The record

The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities