CVE-2026-28148

Description

Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.

Traduire en français

Produits concernés

• miniOrange Headless Single Sign On

Scores CVSS

Faiblesses (CWE)

• CWE-347

Références

• https://patchstack.com/database/wordpress/plugin/headless-single-sign-on/vulnerability/wordpress-headless-single-sign-on-plugin-1-6-bypass-vulnerability-vulnerability?_s_id=cve

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories