CyberSecBulletin

Pow-auth vulnerabilities

We track 1 vulnerability in Pow-auth products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2026.

1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score

Latest Pow-auth vulnerabilities

  • 9.3 Critical severity

    assent: Authentication Bypass by Spoofing

    CVE-2026-117656Pow-auth

    Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability in the Sign in with Apple strategy in pow-auth Assent allows an unauthenticated remote attacker to impersonate another user via the user parameter of the authorization callback. Apple post