MEDIUMCVSS v3 5.3Vulnerability

CVE-2026-77172

App passwords were allowed to bypass password confirmation on sensitive endpoints.

Properties

Severity
MEDIUM
Nvd fetched at
2026-10-27T19:32:16.133732+00:00
Cvss score
5.3
Cvss severity
MEDIUM
Retrieved at
2026-10-27T19:33:27+00:00
Score
5.3
Last source
NVD
Cvss version
3.0
Cve id
CVE-2026-77172
Cvss vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
First seen by Signal
2026-10-27T19:33:27+00:00
Vector
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Published at
2026-10-27T17:17:02.933
Last modified
2026-10-27T17:17:02.933

Related Entities (1)

HAS_WEAKNESS (1)

→[Weakness]Improper Privilege Management

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-77172 (CVSS v3 5.3) — Ninja Signal Threat Intelligence | Ninja Signal