PT-2026-78234

Name of the Vulnerable Software and Affected Versions 4gaBoards versions prior to 3.3.8 Description An issue exists when registrationEnabled, localRegistrationEnabled, and ssoRegistrationEnabled are enabled and Google, GitHub, Microsoft, or OIDC SSO is configured. The 'POST /api/register' endpoin...

CVE-2026-15611

Logto , an identity and access management system, is vulnerable to unverified email-based SSO account linking (CVE-2026-15611). The vulnerability exists in the identity-processing pipeline where Logto links a local user account to a new SSO identity if no account exists for the given (issuer, ide...