Cert Cc
Related 3slug: cert-cc
No explanation yet for this tag.
Vulnerabilities tagged with this 3
- Unrated Pre-CVE record VU#166125: Bisheng has authentication bypass vulnerabilities CVE-2026-96679 (Legacy SSO Bypass) A vulnerability resides in the legacy SSO endpoint (POST /user/sso). The application processes incoming JSON payloads containing arbitrary usernames and issues a valid JSON Web Token (JWT) without enforcing any form of caller authentication, such as signature verif... CVE-2026-96679
- Unrated Pre-CVE record VU#166125: Bisheng has authentication bypass vulnerabilities CVE-2026-96681 (IDOR Workflow Exposure) There are missing authorization controls across multiple version retrieval endpoints. The underlying source code retrieves flow and workflow version records based on user-supplied parameters without performing any data ownership or permission validation. Any a... CVE-2026-96681
- Unrated Pre-CVE record VU#166125: Bisheng has authentication bypass vulnerabilities CVE-2026-100156 (Credential Abuse & Access Control Skip) Within the assistant service's prompt auto-optimization feature, endpoints accept an assistant identifier from the caller without verifying whether the caller owned that assistant. An assistant identifier is a mechanism that lets users or syst... CVE-2026-100156