{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-01T09:13:33.144","vulnerabilities":[{"cve":{"id":"CVE-2025-69602","sourceIdentifier":"cve@mitre.org","published":"2026-01-28T19:16:24.017","lastModified":"2026-06-17T10:00:45.427","vulnStatus":"Analyzed","cveTags":[],"descriptions":[{"lang":"en","value":"A session fixation vulnerability exists in 66biolinks v62.0.0 by AltumCode, where the application does not regenerate the session identifier after successful authentication. As a result, the same session cookie value is reused for users logging in from the same browser, allowing an attacker who can set or predict a session ID to potentially hijack an authenticated session."},{"lang":"es","value":"Una vulnerabilidad de fijación de sesión existe en 66biolinks v62.0.0 de AltumCode, donde la aplicación no regenera el identificador de sesión después de una autenticación exitosa. Como resultado, el mismo valor de cookie de sesión se reutiliza para los usuarios que inician sesión desde el mismo navegador, permitiendo a un atacante que puede establecer o predecir un ID de sesión potencialmente secuestrar una sesión autenticada."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-01-29T20:04:33.645421Z","id":"CVE-2025-69602","options":[{"exploitation":"poc"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-384"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:altumcode:66biolinks:62.0.0:*:*:*:*:*:*:*","matchCriteriaId":"8DE8E70F-E370-40E7-972E-461E17C2F91C"}]}]}],"references":[{"url":"https://gist.github.com/Waqar-Arain/c8117308325a91b8f3b7829646915275","source":"cve@mitre.org","tags":["Exploit","Third Party Advisory"]}]}}]}