CVE-2026-35095: e-BOK 0 to before 06.2026

CVE-2026-35095. EPSS 0.00211 (percentile 0.11231), scored 25-Oct-2026.

Affected technology

e-BOK · 0 to before 06.2026
KTM System

Component: e-BOK

Attack conditions (Vendor/CNA, CVSS 4.0): Local · No privileges required · Passive user interaction

What an attacker can do

An attacker can fix a session ID for a victim and later hijack the authenticated session. Vendor/CNA’s CVSS 4.0 assessment (base score 4.8/10) rates confidentiality and integrity impact as low; availability impact as none.

Published 25-Oct-2026 21:45 UTC

CWE: CWE-384
CCR priority: 0.1 /100 (P5)
EPSS: 0.00211 · percentile 0.11231 · 2026-10-25
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-25 21:44:36.062275+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-35095.html