What is GHSA-hgj5-8xcv-g949?

GHSA-hgj5-8xcv-g949 is a security advisory published by GitHub Security Advisories with Medium severity. A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT...

Which CVE IDs does GHSA-hgj5-8xcv-g949 cover?

GHSA-hgj5-8xcv-g949 covers the following CVE IDs: CVE-2026-92378. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-hgj5-8xcv-g949Medium

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT...

Vendor

GitHub Security Advisories

Published

September 23, 2026

Last Modified

September 23, 2026

🔗 CVE IDs covered (1)

CVE-2026-92378 →

📋 Description

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be authenticated as the previous user and gain unauthorised limited access to device functionality.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-92378
https://ntware.atlassian.net/wiki/spaces/SA/pages/14160592897/Security+Advisory+Previous+login+session+retained+when+entering+Reduced+Function+Login
https://www.canon-europe.com/psirt/advisory-information
https://github.com/advisories/GHSA-hgj5-8xcv-g949