CVE-2026-0696 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In ConnectWise PSA versions older than 2026.1, certain session cookies were not set with the HttpOnly attribute. In some scenarios, this could allow client-side…
Medium CVSS: 6.5

CVE-2026-0696

In ConnectWise PSA versions older than 2026.1, certain session cookies were not set with the HttpOnly attribute. In some scenarios, this could allow client-side scripts access to session cookie values.
Vendor
Connectwise
Product
Professional Service Automation
CWE
CWE-1004
Yayın Tarihi
2026-01-16 14:15:54
Güncelleme
2026-01-27 13:15:54
Source Identifier
7d616e1a-3288-43b1-a0dd-0a65d3e70a49
KEV Date Added
-

Kategoriler

CWE-1004 Professional Service Automation MEDIUM Connectwise 2026

Referanslar

https://www.connectwise.com/company/trust/security-bulletins/2026-01-15-psa-security-fix https://www.themissinglink.com.au/security-advisories/cve-2026-0696