CVE ID :CVE-2026-53516 Published : July 15, 2026, 6:16 p.m. | 17 minutes ago Description :Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, Better Auth's OAuth callback auto-link gate in handleOAuthUserInfo accepts implicit account linking when the...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-53516 - Better Auth: Account takeover via OAuth auto-link to unverified pre-registered email

VERWANDTEARTIKEL

CVE-2026-62948 - OpenWrt odhcpd/LuCI: unauthenticated DHCPv6 client can inject lease-file lines via FQDN hostname → stored XSS in the LuCI admin UI

CVE-2026-59258 - immich < 3.0.3 Shared Album Editor Ownership Takeover via updateUser

CVE-2026-62389 - ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoS

CVE-2026-53517 - Better Auth OAuth Provider: Refresh Token Rotation Race Condition Allows Concurrent Replay and Token Family Forking

CVE-2026-58658 - GPUStack Unauthenticated Information Disclosure via Worker Endpoints

CVE-2026-58659 - PyTorch Lightning Arbitrary Code Execution via _instantiator Hyperparameter