Bug 2567880 (CVE-2026-122019) - CVE-2026-122019 6valley: 6valley: Authorization bypass via manipulated user response in social login flow
Summary: CVE-2026-122019 6valley: 6valley: Authorization bypass via manipulated user r...
Keywords:
Status: NEW
Alias: CVE-2026-122019
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-11-05 22:33 UTC by OSIDB Bzimport
Modified: 2026-11-06 02:14 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-11-05 22:33:25 UTC 
A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument user_response leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used.
Note You need to log in before you can comment on or make changes to this bug.