CVE-2026-28148

An unauthenticated bypass vulnerability exists in Headless Single Sign On versions up to 1.6, allowing attackers to gain unauthorized access to sensitive resources without authentication. This critical flaw, rated 9.8 on the CVSS scale, poses a significant risk to organizations using affected versions, particularly those relying on single sign-on for user authentication. Organizations should prioritize patching or mitigating this vulnerability to prevent potential data breaches and unauthorized access.