{"id":"CVE-2026-122019","title":"6amTech 6valley Social Login Flow existing-account-check existingAccountCheck authorization","summary":"A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument user_response lea…","severity":"high","cvss":7.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C","cvssSource":"cna","cwe":["CWE-639","CWE-285"],"vendor":"6amTech","product":"6valley","affected":["6valley 16.0"],"published":"2026-11-04","updated":"2026-11-04","sourceUpdated":"2026-11-04T21:45:07.639Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-122019","references":[{"url":"https://vuldb.com/vuln/431085","label":"VDB-431085 | 6amTech 6valley Social Login Flow existing-account-check existingAccountCheck authorization"},{"url":"https://vuldb.com/vuln/431085/cti","label":"VDB-431085 | CTI Indicators (IOB, IOC, IOA)"},{"url":"https://vuldb.com/cve/CVE-2026-122019","label":"CVE-2026-122019 | CVE Analysis and Report"},{"url":"https://vuldb.com/submit/1024992","label":"Submit #1024992 | 6amTech 6valley 16.0 Authorization Bypass"},{"url":"https://github.com/oscar2744/CVE-Submit/issues/3"}],"tags":["cve.org"],"ingestedAt":"2026-11-05T21:36:00.624Z","slug":"CVE-2026-122019","body":"## Overview\n\nA vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument user_response leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used.\n\n## Affected\n\n- `6valley 16.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":40.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}