CVE-2026-5376: runZero Platform session timeout failure

Q: What is the severity of CVE-2026-5376?

CVE-2026-5376 has an estimated CVSS score indicating a moderate severity level due to session timeout failures.

Q: How do I fix CVE-2026-5376?

To fix CVE-2026-5376, upgrade the runZero Platform to version 4.0.260203.0 or later.

Q: What does CVE-2026-5376 affect?

CVE-2026-5376 affects the runZero Platform versions up to 4.0.260203.0.

Q: What type of vulnerability is CVE-2026-5376?

CVE-2026-5376 is classified under CWE-613, which relates to insufficient control of resources after expiration.

Q: What could happen if CVE-2026-5376 is exploited?

Exploitation of CVE-2026-5376 could lead to session persistence beyond intended inactivity timeout, compromising session security.

Published Apr 7, 2026

Updated

An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insufficient Control of Resources After Expiration or Release, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N (5.9 Medium). This issue was fixed in version 4.0.260203.0 of the runZero Platform.

Affected Software

2 affected components

runZero runZero Platform<4.0.260203.0

Remediation

Information

This issue was fixed in version 4.0.260203.0 of the runZero Platform

Event History

Apr 7, 2026

CVE Published

via MITRE·02:11 PM

Data Sourced

via MITRE·02:11 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:17 PM

DescriptionSeverityWeaknessAffected Software

Aug 24, 58276

Event

via FIRST·02:16 PM

Frequently Asked Questions

What is the severity of CVE-2026-5376?

CVE-2026-5376 has an estimated CVSS score indicating a moderate severity level due to session timeout failures.

How do I fix CVE-2026-5376?