CVE-2026-92378

— UNSCORED

Published 2026-09-23 · Updated 2026-09-23

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be authenticated as the previous user and gain unauthorised limited access to device functionality.

Weaknesses

CWE-613

All references

https://ntware.atlassian.net/wiki/spaces/SA/pages/14160592897/Security+Advisory+Previous+login+session+retained+when+entering+Reduced+Function+Login
https://www.canon-europe.com/psirt/advisory-information/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100502PoC
MEDIUMCVE-2026-100554PoC
MEDIUMCVE-2026-100624PoC
HIGHCVE-2026-100711PoC
UNSCOREDCVE-2026-101271
MEDIUMCVE-2026-102367PoC
MEDIUMCVE-2026-14465
UNSCOREDCVE-2026-67242PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.