CVE-2026-97406

Description

XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials.

Traduire en français

Produits concernés

• Xerj Console API

Références

• https://kb.cert.org/vuls/id/645818
• https://www.kb.cert.org/vuls/id/645818

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories