Lucene search
+L

5 matches found

Vulnrichment
Vulnrichment
•added 2026/10/14 4:01 p.m.•7 views

CVE-2026-100169 Account pre-hijacking in the Prowler API through email based social account linking without verification

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

7.6CVSS5.8AI score0.00851EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2026/10/14 4:01 p.m.•20 views

CVE-2026-100169 Account pre-hijacking in the Prowler API through email based social account linking without verification

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

7.6CVSS5.8AI score0.00534EPSS
SaveExploits1References8
Mend
Mend
•added 2026/10/14 4:01 p.m.•12 views

CVE-2026-100169

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

8.1CVSS5.8AI score0.00851EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/14 4:01 p.m.•60 views

CVE-2026-100169 Account pre-hijacking in the Prowler API through email based social account linking without verification

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

7.6CVSS0.00851EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/14 12:00 a.m.•10 views

CVE-2026-100169: Improper Authentication

Improper Authentication in the social account linking path of the Prowler API in Prowler from 5.4.0 before 5.35.0 allows a remote unauthenticated attacker to obtain persistent access to the account of a user who has not yet registered, because ProwlerSocialAccountAdapter.presociallogin in...

7.6CVSS5.8AI score0.00851EPSS
SaveExploits0References2
Rows per page
Query Builder