- CVE ID
- sonatype-2026-005069
- CWE
- N/A
- CVE Description
- @budibase/server - OIDC SSO account takeover
- Published
- Jul 25, 2026
- CVSS Score & Severity
9.5Critical
- CVSS Vector
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:H
- EPSS Score
- 0%
- KEV Status
Not in KEV Catalog: No known exploits
- Vulnerable Methods
authenticate/anon{53,43,063c639,f}()JSVulnerable params: 0
authenticate/anon{60,46,063c639,f}()JSVulnerable params: 0
authenticateThirdParty()JSVulnerable params: 0
authenticateThirdParty/anon{52,43,cec425b,f}()JSVulnerable params: 0
- Source
- Sonatype
