Live › vulnerability › CVE-2026-18451
Go to dashboardThe HTML5 KVM-over-IP console authenticates using a token returned by the device's web interface. Weaknesses in how that token is generated may let an attacker guess a session token and take control of the KVM session.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 08:31 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session.
This page as .md · .json · in your agent: get_signal("CVE-2026-18451")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.