HIGHCVSS v3.1 7.3Vulnerability
CVE-2026-122019
A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument user_response leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-05T01:47:04.832199+00:00
- Cvss severity
- HIGH
- Cvss score
- 7.3
- Retrieved at
- 2026-11-05T01:47:49+00:00
- Score
- 7.3
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-122019
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- First seen by Signal
- 2026-11-05T01:42:37+00:00
- Name
- CVE-2026-122019
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Published at
- 2026-11-04T22:17:55.930
- Last modified
- 2026-11-04T22:17:56.107
Related Entities (2)
HAS_WEAKNESS (2)
Explore deeper with Ninja Signal's threat intelligence graph