Plaintext credential transmission in Avantra password reset mechanism (CVE-2026-8673)

Avantra's password re-initialization mechanism transmits passwords in plaintext, exposing credentials to network sniffing attacks. The vulnerability affects Avantra on Linux and Windows, with high impact to both confidentiality and integrity of affected credentials. Affected versions: - before 25.3.0 We recommend updating to: 25.3.x. CVSS 9.1 · our assessment: act_now Reference: https://support.avantra.com/hc/en-us/articles/5535621927071 Details: https://vuln.today/cve/CVE-2026-8673