Avantra vulnerabilities

4 known vulnerabilities in Avantra from Syslink Software. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Avantra: Unprotected Transport of Credentials

  CVE-2026-8673May 22, 2026Syslink Software

  Unprotected transport of credentials vulnerability in syslink software AG Avantra on Linux, Windows allows Sniffing Attacks. This issue affects Avantra: before 25.3.0.

• 7.5 High severity

  Avantra: Insertion of Sensitive Information into Log File

  CVE-2026-8671May 22, 2026Syslink Software

  Insertion of sensitive information into log file vulnerability in syslink software AG Avantra on Linux, Windows allows Resource Leak Exposure. This issue affects Avantra: before 25.3.0.

• 9.6 Critical severity

  Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows…

  CVE-2026-8670May 22, 2026Syslink Software

  Insufficient session expiration vulnerability in syslink software AG Avantra on Linux, Windows allows Reusing Session IDs (aka Session Replay). This issue affects Avantra: before 25.3.1.

• 7.2 High severity

  Avantra: Use of Hard-coded Credentials

  CVE-2026-3873Mar 13, 2026Syslink Software

  Use of Hard-coded Credentials vulnerability in Avantra allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Avantra: before 25.3.0.