CVE-2026-73683

creationtimestamp| type| source ---|---|--- 2026-08-14 23:00:41+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt3b72mrsj22 2026-08-14 23:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mt3cbrslom2e 2026-08-14 23:37:53+00:00| seen|...

CVE-2026-73683 Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay

Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC idtokens by exploiting the missing nonce claim validation in the getUserByOIDCToken function within FacebookProvider.php. Attackers who obtain a vali...