CVE-2026-5749

creationtimestamp| type| source ---|---|--- 2026-04-22 14:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mk3p6fiyof2r 2026-04-22 15:17:58+00:00| published-proof-of-concept| Telegram/T-tSUe4gAAJ730TQ0PlGw8q14q5lnUsjAniTyA8QTkzNFGU...

CVE-2026-5749

Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with authenticated API resources. Successful exploitation of this vulnerability could allow an unauthenticated attacker to compromise th...