gcdRadar
tags/Attack types

session-hijacking

2 live · 10 on record · last incident 1 day ago

Dec ’25records per month, by first reportNov ’26

Live2

  1. live
    Microsoft Teams Microsoft Teams meeting booking phishing trap compromises enterprise session

    Breaches & attacks · Exploited · since 13 Nov 2026

    Attackers used a fake Microsoft Teams meeting scheduler to trick an employee into approving a device code sign-in. The attackers obtained a valid session token before the incident was identified.

  2. live
    Google Calendar Operation CloudFire Phishing Campaign Hijacks Google Sessions

    Breaches & attacks · Exploited · since 4 Nov 2026 · updated 12 Nov 2026

    A phishing campaign used Google Calendar invites and fake login pages to bypass multi-factor authentication and hijack corporate sessions. Security researchers tracked the attacks and assisted in taking down hundreds of domains used in the campaign.

Earlier8

  1. closed7.6
    Open WebUI CVE-2026-109292: Open WebUI information disclosure leaks session cookies to OAuth servers

    Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-109292

    AI
  2. closed8.3
    MCP SDKs CVE-2026-67431: Session Hijacking Vulnerability in MCP Ruby SDK

    Patch now · Disclosed · since 29 Jul 2026 · CVE-2026-67431

    AI
  3. closed7.7
    Open WebUI CVE-2026-59216: Open WebUI cross-user code-interpreter and tool execution

    Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59216

    AI
  4. closed6.3
    LiteLLM CVE-2026-12772: LiteLLM API Key Generator Has Insufficient Session Expiration

    Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12772

    AI
  5. closed8.1
    Open WebUI CVE-2026-44553: Open WebUI Stale Admin Role in Socket.IO Session Pool

    Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44553

    AI
  6. closed4.1
    LoLLMs CVE-2026-1163: parisneo/lollms insufficient session expiration vulnerability

    Patch now · Disclosed · since 8 Apr 2026 · CVE-2026-1163

    AI
  7. closed8.2
    MCP SDKs CVE-2026-33946: MCP Ruby SDK session hijacking vulnerability

    Patch now · Disclosed · since 27 Mar 2026 · CVE-2026-33946

    AI
  8. closed
    Flowise Flowise fails to invalidate sessions after password changes

    Patch now · Disclosed · since 14 Nov 2025

    AI