An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insufficient Control of Resources After Expiration or Release, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N (5.9 Medium). This issue was fixed in version 4.0.260203.0 of the runZero Platform.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://www.runzero.com/advisories/runzero-platform-session-timeout-failure-cve-2026-5376/ Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.9 · runzeroNVD modified 2026-10-26 22:10
Affected (CPE criteria) 1
cpe:2.3:a:runzero:runzero_platform:*:*:*:*:*:*:*:*