OCTOBER 6, 2026
Live Feed
Back to database
Case File

CVE-2026-97274

CRITICAL · CVSS 9.8 EPSS 0.30%

Source: NVD + CISA KEV + EPSS · Published 2026-09-30 · Last synced 2026-10-06

CyberRota Analysis

AI-Generated

An unauthenticated bypass vulnerability exists in OAuth Single Sign-On (SSO) for versions 7.1.2 and earlier, allowing attackers to gain unauthorized access to protected resources. This critical flaw, rated 9.8 on the CVSS scale, poses a significant risk to organizations utilizing these versions, as it could lead to unauthorized data exposure and account takeover. Organizations using affected versions should prioritize immediate patching to mitigate potential exploitation.

CVE
CVE-2026-97274
Severity
CRITICAL
CVSS
9.8
EPSS
0.30%

Original NVD Description

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions.