Webasyst Framework 4.0.3 OAuth Credential Interception

Webasyst Framework version 4.0.3 and earlier contains an OAuth 2.0 validation flaw that may allow interception of authorization credentials and access tokens...

CVE-2026-51954

Product: Webasyst Framework Affected Version: ≤ 4.0.3 Severity: High CVSS 3.1: 8.0 Description Webasyst Framework through 4.0.3 contains an OAuth 2.0 implementation flaw that allows a remote, unauthenticated attacker to intercept authorization credentials issued during the OAuth flow, without...