CVE-2026-77172

Published: Oct 27, 2026Modified: Oct 28, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.6 / Impact: 3.6

Source: support@hackerone.com (Secondary)

Description

App passwords were allowed to bypass password confirmation on sensitive endpoints.

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (1)

https://hackerone.com/reports/3566607

Source: support@hackerone.com

Timeline

No history available yet.