Threats Tagged 'cve-2026-55075'
View all threats tagged with 'cve-2026-55075'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-55075'
Click on any threat for detailed analysis and mitigation recommendations
GHSA-9r87-mvcw-x35f: Coder vulnerable to OIDC account takeover via email-based user matching and email_verified bypassCVE-2026-55075 0 Coder versions prior to patched releases in 2.29, 2.32, 2.33, and 2.34 contain two chained OIDC login flaws that allow an attacker to take over user accounts. The vulnerability arises from fallback email-based user matching that does not verify existing identity provider links and improper enforcement of the email_verified claim, allowing authentication bypass. Successful exploitation requires attacker control of an OIDC provider account with an email matching a victim's Coder account that is not linked to another IdP subject. Patched versions are available in all supported release lines. Join the discussion | GCVE Database | 07/06/2026, 20:52:13 UTC Added: 07/06/2026, 23:02:29 UTC |
Showing 1 to 1 of 1 result