Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 14 Nov 2026 11:54:20 +0000 CVE-2026-126310 — OpenBao before 2.6.5 and 2.7.2 OIDC Provider Authentication Bypass via Client Credentials https://db.gcve.eu/vuln/cve-2026-126310 <p><strong>Affected:</strong> openbao</p> <p>OpenBao before 2.6.5 and 2.7.2 contains an authentication bypass vulnerability that allows unauthenticated callers to obtain OIDC ID tokens by abusing public clients with client_credentials enabled. Attackers who know a public client&#39;s client_id can request tokens from the identity/oidc/provider/&lt;name&gt;/token endpoint to impersonate the client without any secret.</p> <p><strong>Affected:</strong> openbao</p> <p>OpenBao before 2.6.5 and 2.7.2 contains an authentication bypass vulnerability that allows unauthenticated callers to obtain OIDC ID tokens by abusing public clients with client_credentials enabled. Attackers who know a public client&#39;s client_id can request tokens from the identity/oidc/provider/&lt;name&gt;/token endpoint to impersonate the client without any secret.</p> https://db.gcve.eu/vuln/cve-2026-126310