CWE-1466 · Other weaknesses
Improper Session Invalidation after Authentication Credential Change
1CVEs
SortMost likely exploited
1 CVEs with CWE-1466 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-110826AshAuthentication log_out_everywhere leaves sessions valid after a password reset or non-atomic password changeteam-alembic · ash_authentication · CVSS 6.3 · 2026-11-03 | 6.3 | 0.5% | 2026-11-03 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.