OAuth - CVE CyberSecurity Database News

Sep 11, 2025 Exploit OAuth

CVE-2025-58060 - Critical Authentication Bypass in OpenPrinting CUPS (How It Works, Exploit Details, and Fix)

OpenPrinting CUPS (Common UNIX Printing System) is a widely used open-source printing server found in nearly every major Linux and UNIX system. In early 2025,

Mar 31, 2025 OAuth

CVE-2025-31123 - How Zitadel’s Expired JWT Keys Allowed Token Theft (With Exploit Guide)

Zitadel, the open-source identity infrastructure, has recently patched a critical flaw: CVE-2025-31123. This bug meant attackers could use *expired* JWT keys to claim fresh access

Feb 27, 2025 XSS API OAuth

CVE-2024-2321 - Bypassing API Access Security in WSO2 Using Just a Refresh Token

--- WSO2 is a popular platform used by businesses and developers to manage APIs, identity, and access. If you’re running WSO2 API Manager, Identity

Feb 25, 2025 API OAuth Google

CVE-2024-12368 - How Odoo’s auth_oauth Module Exposed User OAuth Tokens (With Exploit Details)

CVE-2024-12368 is a critical vulnerability affecting Odoo Community 15. and Odoo Enterprise 15.. At the core of this vulnerability is improper access control in the

Feb 18, 2025 Exploit OAuth

CVE-2025-26620 - Race Condition Vulnerability in Duende.AccessTokenManagement for .NET

CVE-2025-26620 is a newly disclosed vulnerability affecting the Duende.AccessTokenManagement library for .NET, which is widely used for managing OAuth and OpenID Connect access tokens.