CVE-2026-78154
Summary
| CVE | CVE-2026-78154 |
|---|---|
| State | REJECTED |
| Assigner | VulDB |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2026-08-24 00:16:47 UTC |
| Updated | 2026-08-25 09:17:35 UTC |
| Description | Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SDK onboarding path for mobile apps that have no backend of their own: a developer generates a code via the authenticated dashboard endpoint, the user types it into the app, and it's redeemed for SDK-scoped tokens. |
Risk And Classification
EPSS: 0.004050000 probability, percentile 0.333940000 (date 2026-08-24)
There are no known software configurations currently associated with this CVE in NVD or the CVE Program record.
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| github.com/the-momentum/open-wearables | MITRE | github.com | |
| github.com/the-momentum/open-wearables/issues/1274 | MITRE | github.com | |
| vuldb.com/cve/CVE-2026-78154 | MITRE | vuldb.com | |
| vuldb.com/submit/882887 | MITRE | vuldb.com | |
| vuldb.com/vuln/394536 | MITRE | vuldb.com | |
| vuldb.com/vuln/394536/cti | MITRE | vuldb.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.