CVE-2024-26331

CVE-2024-26331 describes an authentication bypass vulnerability in ReCrystallize Server 5.10.0.0. The flaw stems from an authorization mechanism that relies on a cookie value not bound to a session ID, allowing attackers to modify the cookie to an expected value and bypass authentication. With a CVSS score of 7.5 (High), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of confidentiality. While not currently in the KEV catalog, Nuclei templates exist for this vulnerability, indicating readily available exploit code, though there is no evidence of active exploitation or significant community discussion.