Cpe:2.3:a:cendio:thinlinc:*:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3acendiothinlinc/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 16:21:01 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgCendio ThinLinc: Improper authentication in web client (CVE-2026-119744)https://feed.craftedsignal.io/briefs/2026-11-cendio-thinlinc-auth-bypass/Thu, 05 Nov 2026 16:21:01 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-cendio-thinlinc-auth-bypass/Cendio ThinLinc versions 4.1.0 through 4.20.0 contain an improper authentication vulnerability in the browser-based web client (tlwebaccess) that allows an authenticated attacker to impersonate other users, including root.<p>Cendio ThinLinc versions 4.1.0 through 4.20.0 contain an improper authentication vulnerability in its browser-based web client (tlwebaccess). An authenticated attacker can impersonate any other user, including root, by exploiting flaws in multi-step authentication flows such as one-time passwords, login banners, or expired password prompts.</p> highadvisory