CVE-2026-126129

The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a logged-out session being accepted for access to protected endpoints...

EUVD-2026-122940

The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a logged-out session being accepted for access to protected endpoints...

CVE-2026-126129

The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a logged-out session being accepted for access to protected endpoints...

CVE-2026-126129

The Auth0 ASP.NET Core Authentication SDK is affected by a vulnerability where it incorrectly determines the OIDC Back-Channel Logout status of a session. This flaw may allow a session that should have been terminated via back-channel logout to remain active, potentially granting unauthorized acc...

PT-2026-144763

The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a logged-out session being accepted for access to protected endpoints...