CVE-2026-19677

The onPhase/ frevvo registration form version 11.0.14 contains an authentication bypass vulnerability. An unauthenticated remote attacker can manipulate registration parameters—specifically by providing a valid tenant name and an existing user identifier—to authenticate as an arbitrary tenant use...

EUVD-2026-108564

An authentication bypass vulnerability in the public onPhase/ frevvo registration form version 11.0.14 allows an unauthenticated remote attacker to authenticate as an arbitrary tenant user, obtain TenantAdmin and Designer privileges, and execute arbitrary operating system commands via manipulatio...