UNKNOWNCVSS not yet scoredVulnerability

CVE-2026-97406

XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials.

Properties

Last source
NVD
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Cve id
CVE-2026-97406
First seen by Signal
2026-10-20T21:15:35+00:00
Retrieved at
2026-10-20T21:15:35+00:00
Published at
2026-10-20T19:19:38.900
Last modified
2026-10-20T19:30:59.910

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-97406 — Ninja Signal Threat Intelligence | Ninja Signal