Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	–	EPSS 0.3%	CVE-2026-97406Console API · Missing Authentication for Critical Function HighEPSS 0.3%2026-10-20CVE Database V5CVE-2026-97406 CVE-2026-97406 is a vulnerability in the Xerj Console API version 1.0.0-rc.11 where bearer tokens can bypass the passkey-only authentication requirement. This allows unauthorized users to invoke the API-token creation endpoint and mint persistent successor credentials without proper authentication. EPSS 0.3%Vulnerability Xerj #cwe-306 #cwe-863	CVE Database V5	2026-10-20

Showing 1–1 of 1 result