CVE-2025-71056

High severity, CVSS 8.1. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper session management in GCOM EPON 1GE ONU version C00R371V00B01 allows attackers to execute a session hijacking attack via spoofing the IP address of an authenticated user.

Published 2026-02-23. Last modified 2026-07-05.