Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-92378 Details

ANALYZED

This CVE record has been analyzed and enriched by NVDAPI.com as an independent party.

Description

A session management vulnerability exists in the Legacy UI Reduced Function Login feature of NT-ware uniFLOW Online. Under specific timing conditions during Service Offline Emergency Mode, a previously authenticated session may be retained after logout, which could allow a subsequent user to be authenticated as the previous user and gain unauthorised limited access to device functionality.

Metrics

CVSS 3.x Severity and Vector Strings:

NDDVolerionCVSS-B:3.3 LOWVector:CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://ntware.atlassian.net/wiki/spaces/SA/pages/14160592897/Security+Advisory+Previous+login+session+retained+when+entering+Reduced+Function+Login Canon_EMEAAdvisoryPermission RequiredVendor
https://www.canon-europe.com/psirt/advisory-information/ Canon_EMEAAdvisoryBundleRemedyVendor

Weakness Enumeration

CWE-IDCWE NameSource
CWE-613Insufficient Session ExpirationCanon_EMEA

Affected Products

ProductVersions
NT-ware uniFLOW Online
All versions

CPE

  • cpe:2.3:a:nt-ware:uniflow_online:*:*:*:*:*:-:*:*
  • cpe:2.3:a:nt-ware:uniflow_online:*:*:*:*:*:chrome:*:*
  • cpe:2.3:a:nt-ware:uniflow_online:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-92378
NVD Published Date:
Sep 23, 2026
NVD Last Modified:
Sep 23, 2026
Source:
Canon_EMEA
CVE-2026-92378 Details - Not Deferred