Filtered by vendor Xerj Subscriptions
Filtered by product Console Api Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-97406 1 Xerj 1 Console Api 2026-10-29 9.1 Critical
XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials.