Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2026-12581

Digiwin|EasyFlow .NET - Session Fixation

Description

EasyFlow .NET developed by Digiwin has a Session Fixation vulnerability. If unauthenticated remote attackers replace a specific session ID for a user, they can gain the user's privilege once the user logs in.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Digiwin EasyFlow .NET

Default version status: unaffected

  • 0 to ≤ 8.1.4affected

References