Lucene search
+L

9 matches found

NVD
NVD
•added 2026/08/07 2:16 p.m.•26 views

CVE-2026-37171

A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another tenant...

5.9CVSS0.00312EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/07 12:00 a.m.•49 views

CVE-2026-37171

A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another tenant...

5.9CVSS0.00312EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/07 12:00 a.m.•78 views

CVE-2026-37171

CVE-2026-37171 affects SuperTokens Core, versions 6.0.0 to 11.4.0. The root cause is a lack of tenant separation, enabling an authenticated party in one tenant to access sessions, data, and endpoints of another tenant. The CVSS 3.1 base score is 5.9 (Medium) with vectors: AV:N/AC:H/PR:L/UI:N/S:U/...

5.9CVSS5.8AI score0.00312EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2026/08/07 12:00 a.m.•21 views

CVE-2026-37171

A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another tenant...

5.9CVSS5.8AI score0.00312EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/07 12:00 a.m.•24 views

EUVD-2026-54490

A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another tenant...

5.9CVSS5.8AI score0.00312EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/07 12:00 a.m.•16 views

CVE-2026-37171

A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another tenant...

5.9CVSS5.8AI score0.00312EPSS
SaveExploits0References1
Mend
Mend
•added 2026/08/07 12:00 a.m.•9 views

CVE-2026-37171

A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another tenant...

6CVSS5.8AI score0.00312EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/07 12:00 a.m.•8 views

CVE-2026-37171: Incorrect Authorization

A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access sessions, data, and endpoints of another tenant...

5.9CVSS5.8AI score0.00312EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/08/07 12:00 a.m.•14 views

PT-2026-69044

Name of the Vulnerable Software and Affected Versions SuperTokens Core versions 6.0.0 through 11.4.0 Description Insufficient tenant separation allows an authenticated user from one tenant to access the sessions, data, and endpoints belonging to another tenant. Recommendations At the moment, ther...

5.9CVSS5.7AI score0.00312EPSS
SaveExploits0References3
Rows per page
Query Builder