Mmastodon TechnologyCybersecurity first seen 21 h ago, last 21 h ago, peak #4

Critical CVSS 9.8 flaw reported in OAuth SSO plugin

Original: 🚨 CVE-2026-97274 — CVSS 9.8 CRITICAL Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) 🔎

A critical vulnerability, CVE-2026-97274, has been disclosed in the OAuth Single Sign On – SSO (OAuth Client) plugin, carrying a CVSS score of 9.8. The flaw is described as an unauthenticated authentication bypass, meaning attackers would not need credentials to exploit it. Security communities are circulating the advisory as organisations using OAuth-based single sign-on assess their exposure.

Why now: A maximum-severity unauthenticated bypass in a widely used single sign-on tool prompts urgent patching and risk assessment.

CVE-2026-97274OAuth Single Sign On – SSO (OAuth Client)

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 21 h ago to 21 h ago.

Evidence

• 🚨 CVE-2026-97274 — CVSS 9.8 CRITICAL Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) 🔎 Details: https:// stemshop.top/cve/CVE-2026-97274 # CVE # CyberSecurity # InfoSec # Vulnerability · stemshop

API: https://socialmediatrends-api.osmike.com/v1/trends/492027