Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:smart-Sso:smart-Sso:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

smart-sso: Incorrect authorization in PermissionFilter (CVE-2026-121543)

An incorrect authorization vulnerability in smart-sso versions 2.0.1 and earlier allows authenticated users to access administrative APIs due to a permissive default configuration in PermissionFilter.

PoC smart-sso privilege-escalation authentication-bypass web-application
1r 1t 1c