CVE-2026-7069

creationtimestamp| type| source ---|---|--- 2026-04-26 07:56:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116469935090388164 2026-04-27 00:21:56+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkgsh44fmy2n 2026-04-27 00:21:57+00:00| seen|...

CVE-2026-7019

creationtimestamp| type| source ---|---|--- 2026-04-26 06:00:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116469479966769623 2026-04-26 06:00:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkeuvkjxt72y 2026-04-29 21:37:08+00:00| seen|...

CVE-2026-7015

creationtimestamp| type| source ---|---|--- 2026-04-26 03:00:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116468772230447502 2026-04-26 03:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkektpqrpa2g...

CVE-2026-6988

creationtimestamp| type| source ---|---|--- 2026-04-26 01:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116468418288218794 2026-04-26 01:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkefsr6wcw2p 2026-05-27 03:37:06+00:00| seen|...

CVE-2026-6992

creationtimestamp| type| source ---|---|--- 2026-04-26 00:00:40+00:00| seen| https://infosec.exchange/users/offseq/statuses/116468065185354062 2026-04-26 00:00:42+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkeas6tx2z2j 2026-07-13 22:00:19+00:00| seen|...

CVE-2026-31679

creationtimestamp| type| source ---|---|--- 2026-04-25 10:33:36+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116464891635249442 2026-04-25 23:21:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116467909996443019 2026-05-05 20:00:00+00:00| seen|...

CVE-2026-31674

creationtimestamp| type| source ---|---|--- 2026-04-25 10:20:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116464839048739557 2026-04-25 22:24:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116467685885034222 2026-05-05 20:00:00+00:00| seen|...

CVE-2026-31682

creationtimestamp| type| source ---|---|--- 2026-04-25 10:06:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116464783504751353 2026-04-25 20:30:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116467237575005440 2026-05-05 20:00:00+00:00| seen|...

CVE-2026-31647

creationtimestamp| type| source ---|---|--- 2026-04-25 05:36:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116463721914259311...

CVE-2026-41327

creationtimestamp| type| source ---|---|--- 2026-04-25 03:00:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/116463109926067503 2026-04-25 03:00:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkc2esawbu2m 2026-05-30 16:37:07+00:00| seen|...

CVE-2026-41492

creationtimestamp| type| source ---|---|--- 2026-04-25 01:30:30+00:00| seen| https://infosec.exchange/users/offseq/statuses/116462756162944901 2026-04-25 01:30:33+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mkbvdwkbgc2v 2026-04-26 05:59:11+00:00| seen|...

CVE-2026-31665

creationtimestamp| type| source ---|---|--- 2026-04-24 18:07:38+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116461014638911540 2026-04-27 20:00:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mkiuc3bley2w 2026-05-05 20:00:00+00:00| seen|...

CVE-2026-1951

creationtimestamp| type| source ---|---|--- 2026-04-24 07:30:27+00:00| seen| https://infosec.exchange/users/offseq/statuses/116458509219616758 2026-04-24 07:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mk7yyn3gto2v 2026-04-24 08:14:21+00:00| seen|...

CVE-2026-28525

creationtimestamp| type| source ---|---|--- 2026-04-24 05:33:06+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116458047820723949...

CVE-2026-32172

creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:09+00:00| published-proof-of-concept| Telegram/kiTcjsXT1hi2Y3u94e7GhzIuEtNJE-kdjO7sui75MorBPg 2026-04-24 05:15:07+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116457977076186027 2026-04-25 01:01:11+00:00| seen|...

CVE-2026-41213

@node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid codeverifier values including one-character strings for S256 PKCE flows. Because short/weak verifiers are accepted and failed verifier attempts do not consume the...

CVE-2026-41213 @node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes

@node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid codeverifier values including one-character strings for S256 PKCE flows. Because short/weak verifiers are accepted and failed verifier attempts do not consume the...

EUVD-2026-25272

@node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid codeverifier values including one-character strings for S256 PKCE flows. Because short/weak verifiers are accepted and failed verifier attempts do not consume the...

CVE-2026-41213 @node-oauth/oauth2-server: PKCE code_verifier ABNF not enforced in token exchange allows brute-force redemption of intercepted authorization codes

@node-oauth/oauth2-server is a module for implementing an OAuth2 server in Node.js. The token exchange path accepts RFC7636-invalid codeverifier values including one-character strings for S256 PKCE flows. Because short/weak verifiers are accepted and failed verifier attempts do not consume the...

CVE-2026-41213

The CVE concerns @node-oauth/oauth2-server, a Node.js OAuth2 server module. The token exchange path accepts RFC7636-invalid code_verifier values for S256 PKCE flows (including one-character verifiers). The underlying cause is that ABNF enforcement for code_verifier is not performed during token e...