{"uuid": "b7b9ed23-15a5-4687-aea2-eab08dee1523", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-49757", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116755425881916574", "content": "\ud83d\udea8 CRITICAL: CVE-2026-49757 in ash_authentication lets attackers bypass auth by spoofing email in OAuth2/OIDC, risking local account takeover. Patch status unconfirmed \u2014 check vendor advisory. Affected: v0.1.0, 5.0.0-rc.0. https://radar.offseq.com/threat/cve-2026-49757-cwe-290-authentication-bypass-by-sp-5df5a500 #OffSeq #CVE202649757 #OAuth2 #infosec", "creation_timestamp": "2026-06-15T18:00:18.422466Z"}