CVE ID :CVE-2026-121939 Published : Nov. 4, 2026, 12:31 p.m. | 33 minutes ago Description :Databasement before 1.10.9 contains an authentication bypass vulnerability in OAuthService::findOrCreateLocalUser() that links OIDC identities to local users by email without checking email_verified....

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-121939 - Databasement before 1.10.9 Account Takeover via OIDC Email Auto-Linking

VERWANDTEARTIKEL

Critical SolarWinds Dameware Flaw Could Allow Attackers to Compromise Remote Systems

Apache OpenOffice: Mehrere Schwachstellen

CVE-2026-121147 - Security Misconfiguration Vulnerability in Tata Motors iRA and iRA.ev mobile application

CVE-2026-121620 - CoopCycle coopcycle-web 5.6.0 before 6.20.0 Missing Zelty Webhook Signature Verification

CVE-2026-121940 - Stonewuu ai-fusion-video before 1.3.0 IDOR via Project, Asset and Script Controllers

CVE-2026-121941 - libmt32emu before 2.8.4 Heap Buffer Overflow via MidiStreamParserImpl::parseSysex