CVE-2026-122019

A flaw was found in 6valley. A remote attacker can bypass authorization controls by submitting a manipulated user response parameter to the account check endpoint during the social login process. This vulnerability could allow an attacker to gain unauthorized access to user accounts. Mitigation...

EUVD-2026-117184

A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument userresponse leads to authorization bypass. The attack may be launched...

CVE-2026-122019

A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument userresponse leads to authorization bypass. The attack may be launched...

CVE-2026-122019

A vulnerability exists in the Social Login Flow component of 6amTech 6valley 16.0 . Specifically, the existingAccountCheck function within the file /api/v1/auth/existing-account-check is susceptible to manipulation. By altering the user_response argument, an attacker can achieve an authorization ...

PT-2026-137195

Name of the Vulnerable Software and Affected Versions 6amTech 6valley version 16.0 Description An authorization bypass exists in the Social Login Flow component. A remote attacker can manipulate the user response variable within the existingAccountCheck function at the...