CVE-2026-97406

CVE-2026-97406 · Authentication Bypass via Bearer Tokens to Unauthorized Credential Minting

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials.

EPSS 0,2%

Publicación

2026-10-20T18:11:08.475Z

Actualización

2026-10-20T19:07:07.888Z

Comprueba tu servidor →