# CVE-2026-5376: An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been…

Source: https://junglewise.ai/threats/cve-2026-5376-an-issue-that-could-prevent-session-inactivity-timeouts-from  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-04-07  
License: CC BY 4.0 with a link back

CVE-2026-5376 · Severity: medium · CVSS 5.9 · Published 2026-04-07

An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved. This is an instance of CWE-613: Insufficient Control of Resources After Expiration or Release, and has an estimated CVSS score of CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N (5.9 Medium). This issue was fixed in version 4.0.260203.0 of the runZero Platform.

Technologies: [Runzero Platform](https://junglewise.ai/threats/technologies/runzero-platform). Vendors: [Runzero](https://junglewise.ai/threats/vendors/runzero).

## Quick answers

**Is CVE-2026-5376 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-5376 being exploited in the wild.

**How severe is CVE-2026-5376?** Medium severity, with a CVSS score of 5.9, published 7 April 2026.

**Which products and versions are affected?** Runzero Platform. The advisory does not name versions.

**Is there a fix for CVE-2026-5376?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-5376?** Check whether you run Runzero Platform. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Runzero Platform

## Related threats

- [runZero Platform information disclosure via malformed search query](https://junglewise.ai/threats/cve-2026-110265-a-specially-crafted-malformed-search-query-could-return-results)
- [An issue that could allow a credential to be updated and used for a task from outside of the authorized organization…](https://junglewise.ai/threats/cve-2026-5384-an-issue-that-could-allow-a-credential-to-be-updated-and-used-for)
- [An issue that could allow access to Explorer groups from outside of the authorized organization scope has been…](https://junglewise.ai/threats/cve-2026-5383-an-issue-that-could-allow-access-to-explorer-groups-from-outside)
- [An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been…](https://junglewise.ai/threats/cve-2026-5382-an-issue-that-could-expose-records-outside-of-the-authorized)
- [An issue that could expose task information outside of the authorized organization scope has been resolved. This is an…](https://junglewise.ai/threats/cve-2026-5381-an-issue-that-could-expose-task-information-outside-of-the)