CyberSecBulletin

Erlef vulnerabilities

We track 1 vulnerability in Erlef products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 30, 2026.

1vulnerabilities
0critical
1high
0exploited
7.6average CVSS score

Latest Erlef vulnerabilities

  • 7.6 High severity

    oidcc: Improper Verification of Cryptographic Signature

    CVE-2026-75759Erlef

    Improper Verification of Cryptographic Signature vulnerability in erlef oidcc allows an unauthenticated attacker to impersonate an arbitrary user via an encrypted ID token or JARM response carrying no nested signature. OpenID Connect Core 1.0 section 2 require