Threats tagged 'ghsa-6rw4-h2xg-jvvp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.2	CVE-2026-126952Zipline through 4.4.0 contains an authentication bypass vulnerability in the WebAuthn login endpoint that creates Critical9.22026-11-13GCVE DatabaseCVE-2026-126952 Zipline versions through 4.4.0 have an authentication bypass vulnerability in the WebAuthn login endpoint. This flaw allows attackers who know a registered credential ID to create sessions without verifying the assertion, enabling impersonation of the associated account. Exploitation can lead to administrative control over SUPERADMIN accounts. Report on CVE-2026-126952 Vulnerability CWE-347 #ghsa-6rw4-h2xg-jvvp	GCVE Database	2026-11-13

Page 1 of 1