← Database

CVE-2026-120844

CRITICAL CVSS: 9.8 Published: 2026-11-06 Modified: 2026-11-06

Description

Incorrect Privilege Assignment vulnerability in miniOrange OAuth Single Sign On – SSO (OAuth Client) miniorange-login-with-eve-online-google-facebook allows Privilege Escalation.This issue affects OAuth Single Sign On – SSO (OAuth Client): from n/a through 7.1.3.

Affected Platforms

Unknown

Weakness Type

CWE-266

References