Vulnerability Description
A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be authenticated as the previous user and gain unauthorised limited access to device functionality.
Related Weaknesses (CWE)
References
- https://ntware.atlassian.net/wiki/spaces/SA/pages/14160592897/Security+Advisory+
- https://www.canon-europe.com/psirt/advisory-information/
FAQ
What is CVE-2026-92378?
CVE-2026-92378 is a documented vulnerability. A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previousl...
How severe is CVE-2026-92378?
CVSS scoring is not yet available for CVE-2026-92378. Check NVD for updates.
Is there a patch for CVE-2026-92378?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.