ThinLinc vulnerabilities

CVEs whose affected-version data names the ThinLinc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119744High· 8.8

yesterday

Cendio ThinLinc Improper Authentication via Web Access

Cendio ThinLinc contains an improper authentication vulnerability in its browser-based web client (tlwebaccess) that allows an authenticated attacker to impersonate any other user, including root, by exploiting flaws in multi-step authen…

▾ TwilightCendio · ThinLincvia CVEORG