Xerj vulnerabilities
We track 1 vulnerability in Xerj products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 20, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Xerj vulnerabilities
- 9.1 Critical severity
Console API: Missing Authentication for Critical Functionality
XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials.