CVE-2026-100502 | pawelmalak Flame up to 2.4.0 Login Endpoint duration session expiration (EUVD-2026-87368)

September 26, 2026 Yanac

A vulnerability categorized as problematic has been discovered in pawelmalak Flame up to 2.4.0. Affected by this issue is some unknown functionality of the component Login Endpoint. Executing a manipulation of the argument duration can lead to session expiration.

This vulnerability appears as CVE-2026-100502. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More