Search: CVE-2026-6266

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.4%	CVE-2026-6266Red Hat Ansible Automation Platform 2.5 for RHEL 8 django-ansible-base · Authentication Bypass by Primary Weakness High8.3EPSS 0.4%2026-05-04CVE Database V5CVE-2026-6266 A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (IDP) identity to an existing AAP user account based on email matching without verifying email ownership. This allows a remote attacker to potentially hijack a victim's account or gain unauthorized access to other accounts, including administrative accounts, by manipulating the IDP-provided email. EPSS 0.4%Vulnerability CWE-305	CVE Database V5	2026-05-04

Page 1 of 1