By weakness (CWE)

CWE-1004: related vulnerabilities

CVEs classified under CWE-1004. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-11956LOW 3.7

  A flaw in TwiN gatus 5.36.0's OIDC session cookie handler can result in session cookies being created without the secure attribute. This means cookies could be transmitted over unencrypted HTTP connections, exposing them to interception. An attacker would need to manipulate the application's session management flow, a process requiring significant technical effort and complex conditions to exploit. While not currently listed on CISA's Known Exploited Vulnerabilities catalog, the issue warrants attention for any deployment handling sensitive authentication flows.