---
id: CVE-2026-122019
title: >-
  6amTech 6valley Social Login Flow existing-account-check existingAccountCheck
  authorization
summary: >-
  A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the
  function existingAccountCheck of the file /api/v1/auth/existing-account-check
  of the component Social Login Flow. Such manipulation of the argument
  user_response lea…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-639
  - CWE-285
vendor: 6amTech
product: 6valley
affected:
  - 6valley 16.0
published: '2026-11-04'
updated: '2026-11-04'
sourceUpdated: '2026-11-04T21:45:07.639Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-122019'
references:
  - url: 'https://vuldb.com/vuln/431085'
    label: >-
      VDB-431085 | 6amTech 6valley Social Login Flow existing-account-check
      existingAccountCheck authorization
  - url: 'https://vuldb.com/vuln/431085/cti'
    label: 'VDB-431085 | CTI Indicators (IOB, IOC, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2026-122019'
    label: CVE-2026-122019 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1024992'
    label: 'Submit #1024992 | 6amTech 6valley 16.0 Authorization Bypass'
  - url: 'https://github.com/oscar2744/CVE-Submit/issues/3'
tags:
  - cve.org
ingestedAt: '2026-11-05T21:36:00.624Z'
---

## Overview

A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument user_response leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used.

## Affected

- `6valley 16.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.