HACKTHEBOX CA26 Very-Easy WEB

Gatery

An Elysia backend's signed session cookie fails to verify signatures (CVE-2025-66457), letting a forged session=inside cookie bypass auth.

#CyberApocalypse2026#Web#Very-Easy#CVE-2025-66457#Elysia