Known Vulnerabilities for Oauth2 by Owncloud
Listed below are 1 of the newest known vulnerabilities associated with "Oauth2" by "Owncloud".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-91039 json | Authentication Bypass by Spoofing vulnerability in team-alembic ash_authentication allows an attacker who operates one identi... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-88952 json | Improper Authentication vulnerability in team-alembic AshAuthentication allows an attacker to be signed in as another user by... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-85511 json | A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-i... | Not Provided | 2026-09-18 | 2026-09-22 |
| CVE-2026-82662 json | Nodemailer before 8.0.8 disables TLS certificate verification in lib/fetch/index.js through rejectUnauthorized: false, allowi... | Not Provided | 2026-08-31 | 2026-09-01 |
| CVE-2026-81637 json | Insufficient Session Expiration vulnerability in team-alembic AshAuthentication allows an attacker who obtains a victim's OAu... | Not Provided | 2026-09-17 | 2026-09-17 |
| CVE-2026-81029 json | OpenMetadata accepts a caller-supplied post-authentication redirect target and appends the issued token to it. SamlLoginServl... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-79652 json | A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build... | Not Provided | 2026-08-25 | 2026-09-16 |
| CVE-2026-77069 json | n8n before 1.123.69, 2.33.4, and 2.34.1 contains an SSRF protection bypass in the OAuth2 credential authorization-code-to-acc... | Not Provided | 2026-08-20 | 2026-08-21 |
| CVE-2026-76835 json | OAuth2 Proxy honours a client-supplied X-Forwarded-Uri header when deciding whether a request may skip authentication, becaus... | Not Provided | 2026-08-24 | 2026-08-24 |
| CVE-2026-75866 json | Punk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types ... | Not Provided | 2026-08-22 | 2026-08-25 |