OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-101271

LOW · CVSS 2.1 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-29 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

OAuth credentials, specifically access tokens, remain valid throughout their designated lifetime even if the associated application is manually disabled. This vulnerability poses a risk as it allows unauthorized access to resources if the application is compromised or mismanaged. Organizations utilizing OAuth for authentication should prioritize addressing this issue to mitigate potential unauthorized access risks.

CVE
CVE-2026-101271
Severity
LOW
CVSS
2.1
EPSS
0.17%

Original NVD Description

OAuth credentials (access tokens) are valid for the entirety of their lifetime, even if the application (OAuth client) they are bound to is manually disabled.