Cpe:2.3:a:6amtech:6valley:16.0:*:*:*:*:*:*:* - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/cpes/cpe2.3a6amtech6valley16.0/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 00:07:09 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svg6amTech 6valley: Authorization bypass in Social Login Flow (CVE-2026-122019)https://feed.craftedsignal.io/briefs/2026-11-6valley-auth-bypass/Thu, 05 Nov 2026 00:07:09 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-6valley-auth-bypass/A vulnerability in the 6valley 16.0 Social Login Flow allows remote attackers to bypass authorization by manipulating the user_response argument during account verification.A vulnerability (CVE-2026-122019) exists in the 6amTech 6valley version 16.0 component related to Social Login Flow. The flaw resides in the existingAccountCheck function within the /api/v1/auth/existing-account-check file. An unauthenticated remote attacker can manipulate the user_response parameter to bypass authorization checks. Publicly available exploit material exists for this vulnerability.

Impact

Successful exploitation allows remote attackers to bypass intended authorization controls, potentially leading to unauthorized account access.

Recommendation

  • Inventory all instances of 6valley 16.0 within the environment.
  • Patch the application immediately or apply configuration changes to restrict access to the /api/v1/auth/existing-account-check endpoint until an official fix is applied.
  • Review web server access logs for anomalous POST requests to the identified API endpoint containing suspicious values in the user_response parameter.
]]>highadvisory