CyberSecBulletin

RITOU vulnerabilities

We track 1 vulnerability in RITOU products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 22, 2026.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest RITOU vulnerabilities

  • 7.5 High severity

    OIDC::Lite: Improper Verification of Cryptographic Signature

    CVE-2026-13089RITOU

    OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verification bypass via a token-controlled algorithm allowlist in verify. When the caller does not pin an algorithm, OIDC::Lite::Model::IDToken::verify sets $self->alg($self->header->{alg}) f