CVE-2023-52268

FreeScout End-User Portal Authentication Bypass Exploit CVE-2023-52268 Overview This exploit targets a vulnerability in the FreeScout End-User Portal Module versions below 1.0.65 that allows an attacker to bypass authentication through improper session token management. By generating and testing...

CVE-2026-39912

CVE-2026-39912 - Xboard / V2Board Unauth Account Takeover Magic Link Token Leak in loginWithMailLink | ---|--- CVE| CVE-2026-39912 CVSS| 9.1 Critical CWE| CWE-201 Insertion of Sensitive Information Into Sent Data Affected| V2Board = 1.6.1 through 1.7.4 / Xboard all versions through 0.1.9+ Fixed|...

CVE-2026-114607

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in...

CVE-2026-114607 better-auth: OAuth state can be used as a Magic Link to sign in as another user

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in...

CVE-2026-114607

The better-auth authentication and authorization library for TypeScript (versions 1.4.0-beta.18 to 1.7.7 ) contains a vulnerability where an OAuth sign-in state can be misused as a Magic Link token. This occurs when specific configurations are met: Magic Link is enabled with storeToken set to pla...

EUVD-2026-108256

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in...

CVE-2026-114607 better-auth: OAuth state can be used as a Magic Link to sign in as another user

Better Auth is an authentication and authorization library for TypeScript. From 1.4.0-beta.18 until 1.7.7, deployments that enable Magic Link with storeToken set to plain, or with storeToken set to hashed and the global verification.storeIdentifier setting also set to hashed, enable a built-in...

PT-2026-120213

Trigger.dev before 4.5.6 self-hosted Docker Compose deployments using the default secrets from hosting/docker/.env.example allow authentication bypass because the hardcoded MAGIC LINK SECRET lets anyone forge valid magic link tokens. Unauthenticated attackers can log in as any email address, then...

EUVD-2026-101745

Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state ...

CVE-2026-110862

Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state ...

CVE-2026-110862

The Better Auth library (versions 1.4.0-beta.18 before 1.7.7 ) is vulnerable to an authentication bypass via Magic Links. The root cause is the reuse of OAuth state values as Magic Link tokens . An unauthenticated attacker can initiate an OAuth sign-in using a victim's email address and subsequen...

CVE-2026-110862 Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link

Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state ...

CVE-2026-110862 Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link

Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state ...

PT-2026-114176

Name of the Vulnerable Software and Affected Versions Better Auth versions 1.4.0-beta.18 through 1.7.6 Description An authentication bypass allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. An attacker can initiate an OAuth sign-in...

CVE-2026-110862: Improper Authentication

Better Auth from 1.4.0-beta.18 before 1.7.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to sign in as other users by reusing OAuth state values as Magic Link tokens. Attackers can start an OAuth sign-in with a victim's email and submit the returned state ...

GHSA-PQXW-G93W-HJ9X Trigger.dev Self-Hosted Deployment: Default Secrets allow Unauthenticated Infrastructure Compromise

Summary Self-hosted trigger.dev v4 instances deployed using the provided Docker Compose configuration with default secrets from hosting/docker/.env.example are vulnerable to a multi-stage unauthenticated attack chain leading to complete infrastructure compromise. Vulnerability Details The...

CVE-2026-82761

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its single-use token and authenticate as the target subject. A magic link configured with singleusetoken?, which is the default, is meant to be...

EEF-CVE-2026-82761 Magic link single-use tokens replayable via TOCTOU race in AshAuthentication

Summary Time-of-check Time-of-use TOCTOU Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its single-use token and authenticate as the target subject. A magic link configured with singleusetoken?, which is the default, is mean...

CVE-2026-82761

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its single-use token and authenticate as the target subject. A magic link configured with singleusetoken?, which is the default, is meant to be...

CVE-2026-82761 Magic link single-use tokens replayable via TOCTOU race in AshAuthentication

Time-of-check Time-of-use TOCTOU Race Condition vulnerability in team-alembic AshAuthentication allows an attacker holding a leaked magic link to replay its single-use token and authenticate as the target subject. A magic link configured with singleusetoken?, which is the default, is meant to be...