CVE-2026-28008

CriticalCVSS 9.8

Published: 13/08/2026(UTC)Updated: 13/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Summary

Broken Authentication vulnerability in OAuth Single Sign On (SSO) (OAuth Client) versions up to 7.0.0 allows an unauthenticated attacker to bypass authentication mechanisms.

Risk Assessment

An attacker can gain unauthorized access to the system by impersonating other users or exploiting flawed OAuth authentication.

Recommendation

Update the OAuth Client component to the latest version that includes a fix for this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.