CVE-2026-2337: Plunet Businessmanager

High severity, CVSS 8.7. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability in Plunet Plunet BusinessManager allows session hijacking, data theft, unauthorized actions on behalf of the user.This issue affects Plunet BusinessManager: 10.15.1.

Affected products

• Plunet Plunet Businessmanager: version 10.15.1 only

Published 2026-02-11. Last modified 2026-06-17.