CVE-2026-15617

Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...

EUVD-2026-48300

Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...

CVE-2026-15617

The Logto identity and access management platform performs principal lookups using strict, unnormalized comparisons on identity attributes, including email domains , issuer identifiers , and identity IDs . Due to a lack of case, whitespace, and Unicode normalization , the system may fail to enfor...

CVE-2026-15617

Logto performs principal lookup without normalizing email and identifier strings, enabling principal collision and unauthorized account access via case- or Unicode-different identities...

The vulnerability of the network software tool Envoy, related to errors in URI normalization, allows a intruder to gain unauthorized access to protected data.

The vulnerability of the network software tool Envoy is related to errors in normalizing URI addresses. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected data...