PT-2026-78234

Name of the Vulnerable Software and Affected Versions 4gaBoards versions prior to 3.3.8 Description An issue exists when registrationEnabled, localRegistrationEnabled, and ssoRegistrationEnabled are enabled and Google, GitHub, Microsoft, or OIDC SSO is configured. The 'POST /api/register' endpoin...

CVE-2026-15611

The Logto identity platform is vulnerable to unauthorized account access due to unverified email-based SSO account linking . If a new SSO login arrives and no matching (issuer, identityId) account exists, Logto searches for a local user by the email address provided by the identity provider (IdP)...