Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:stoatchat:stoatchat:*:*:*:*:*:*:*:*

1 brief RSS
high advisory

Authentication Bypass in stoatchat via MFA Ticket Manipulation

stoatchat versions prior to 0.15.5 are vulnerable to an authentication bypass where attackers can use their own MFA ticket to authenticate against a victim's session.

stoatchat authentication-bypass mfa-bypass cve-2026-100679
1t 1c