Related VulnerabilitiesPoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity SwitchPoCCVE-2026-30965: Parse Server < 8.6.21 / 9.x < 9.5.2 - Session Token ExfiltrationPoCCVE-2026-33439: OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession DeserializationPoCCVE-2026-41940: cPanel & WHM - Authentication Bypass via Session-File CRLF InjectionPoCCVE-2023-5203: WP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL InjectionPoCCVE-2025-28242: DAEnetIP4 METO v1.25 - Session HijackingPoClaravel-sessions-exposure: Laravel Sessions Folder ExposureOpenCode /session 代码执行漏洞（CVE-2026-22812）Cal.com /api/auth/session 权限绕过漏洞（CVE-2026-23478）PoC深信服运维安全管理系统 protocol/session 命令执行漏洞