ash_authentication has 1 CVE on record. 1 was published in the last 90 days.

CVEs per month

Last 12 months, by publish date

1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09

Exploited share: 0% vs 1% corpus
Median CVSS: —
Publish → KEV: —
Last 90 days: 1 prev 0

Weakness classes

CWE-290 1

Products

ash_authentication 1

Follow ash_authentication:RSS feed Save a search →Embed badge ↗

1

Total CVEs

1

Critical

0

CISA KEV

0

Exploited

Worst active — by depth score

CVE-2026-49757CriticalAshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching64

ash_authentication vulnerabilities

CVEs affecting ash_authentication, newest first. Open any entry for full detail, references, and exploit status.

1 CVERSS

CVE-2026-49757CriticalPoC

AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching

AshAuthentication vulnerable to OAuth2/OIDC account takeover via email-based user matching

▾ Abyssalash_authentication · ash_authenticationEPSS 0.61%via GHSA

ash_authentication vulnerabilities (CVEs) · VulnSea