CVE-2026-79317 | vaxilu x-ui 0.3.2 Session Management missing secure attribute

September 21, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in vaxilu x-ui 0.3.2. Affected by this issue is some unknown functionality of the component Session Management. Performing a manipulation results in sensitive cookie without secure attribute.

This vulnerability is known as CVE-2026-79317. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More