Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #4

Critical CVSS 9.8 flaw reported in OAuth SSO plugin

Original: 🚨 CVE-2026-97274 — CVSS 9.8 CRITICAL Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) 🔎

A critical vulnerability, CVE-2026-97274, has been disclosed in the OAuth Single Sign On – SSO (OAuth Client) plugin, carrying a CVSS score of 9.8. The flaw is described as an unauthenticated authentication bypass, meaning attackers would not need credentials to exploit it. Security communities are circulating the advisory as organisations using OAuth-based single sign-on assess their exposure.

Why now: A maximum-severity unauthenticated bypass in a widely used single sign-on tool prompts urgent patching and risk assessment.

CVE-2026-97274OAuth Single Sign On – SSO (OAuth Client)

Open on mastodon →

Evidence

• 🚨 CVE-2026-97274 — CVSS 9.8 CRITICAL Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) 🔎 Details: https:// stemshop.top/cve/CVE-2026-97274 # CVE # CyberSecurity # InfoSec # Vulnerability · stemshop

API: https://socialmediatrends-api.osmike.com/v1/trends/492027