Threats tagged 'ghsa-75cj-86wv-m74j'

CVE-2026-65520 is a critical unauthenticated SQL Injection vulnerability affecting miniOrange WP OAuth Server versions up to and including 6.2.0. This flaw allows an attacker to inject SQL commands without authentication, potentially leading to high confidentiality impact and limited availability impact. No official patch or remediation guidance is currently confirmed from the vendor. Users should monitor vendor advisories for updates and apply fixes once available.