CVE-2026-25818 | HMS Ewon Flexy prior 15.0s4/22.1s6/23.0s3 Session Cookie improper authentication

A vulnerability marked as critical has been reported in HMS Ewon Flexy. This affects an unknown function of the component Session Cookie Handler. This manipulation causes improper authentication.

The identification of this vulnerability is CVE-2026-25818. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.