CVE-2026-78188 | WebDyne up to 3.21 Session cookie httponly flag

October 31, 2026 Yanac

A vulnerability classified as problematic was found in WebDyne up to 3.21. Affected by this issue is some unknown functionality of the component Session. Executing a manipulation can lead to cookie without ‘httponly’ flag.

This vulnerability is tracked as CVE-2026-78188. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More