CVE-2026-121543 - smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation
CVE ID :CVE-2026-121543 Published : Nov. 3, 2026, 4:17 p.m. | 47 minutes ago Description :smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any authenticated user to call admin console APIs because unlisted paths are permitted by...