CWE-1464 · Other weaknesses
Improper Session Invalidation
2CVEs
SortMost likely exploited
2 CVEs with CWE-1464 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-123292In JetBrains Datalore before 2026.4 aPI tokens and sessions of removed or banned users remained validJetBrains · Datalore · CVSS 2.7 · 2026-11-06 | 2.7 | 0.3% | 2026-11-06 |
| CVE-2026-123283In JetBrains Datalore before 2026.4 account takeover was possible via SSO sign-in to a pre-registered accountJetBrains · Datalore · CVSS 6.8 · 2026-11-06 | 6.8 | 0.2% | 2026-11-06 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.