CVE-2026-122019High· 7.3▾ TwilightA vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument user_response lea…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 40.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument user_response leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used.
6valley 16.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2025-12288Medium· 4.3A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4
CVE-2025-12283Medium· 4.3A security flaw has been discovered in code-projects Client Details System 1.0
CVE-2026-120319Medium· 6.3Sanluan PublicCMS publiccms-trade TradeRefundService.java TradeRefundService.updateAmound authorization
CVE-2026-121583Medium· 6.3Sanluan PublicCMS TradePaymentService.java TradePaymentService.pendingRefund authorization
CVE-2026-121585Medium· 4.3InfiniFlow RAGFlow Text To SQL Retrieval sql.go RunSQL authorization
CVE-2026-121582Medium· 6.5Umami Record API Endpoint route.ts authorization