Console API vulnerabilities

1 known vulnerability in Console API from Xerj. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Console API: Missing Authentication for Critical Functionality

  CVE-2026-97406Oct 20, 2026Xerj

  XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials.