CVE-2026-97274 is an authentication bypass vulnerability classified under CWE-290 in miniOrange OAuth Single Sign On – SSO (OAuth Client) versions <= 7.1.2. The vulnerability enables unauthenticated attackers to bypass authentication controls through spoofing techniques. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild, and no vendor patch or advisory details are available at this time.

Successful exploitation of this vulnerability allows unauthenticated attackers to bypass authentication, potentially gaining unauthorized access to protected resources. This can lead to complete compromise of the affected system's confidentiality, integrity, and availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing additional access controls or monitoring for suspicious authentication bypass attempts specific to this product.