{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/6valley-16.0/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:6amtech:6valley:16.0:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.3,"id":"CVE-2026-122019"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["6valley (16.0)"],"_cs_severities":["high"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["6amTech"],"content_html":"\u003cp\u003eA vulnerability (CVE-2026-122019) exists in the 6amTech 6valley version 16.0 component related to Social Login Flow. The flaw resides in the existingAccountCheck function within the /api/v1/auth/existing-account-check file. An unauthenticated remote attacker can manipulate the user_response parameter to bypass authorization checks. Publicly available exploit material exists for this vulnerability.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows remote attackers to bypass intended authorization controls, potentially leading to unauthorized account access.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all instances of 6valley 16.0 within the environment.\u003c/li\u003e\n\u003cli\u003ePatch the application immediately or apply configuration changes to restrict access to the /api/v1/auth/existing-account-check endpoint until an official fix is applied.\u003c/li\u003e\n\u003cli\u003eReview web server access logs for anomalous POST requests to the identified API endpoint containing suspicious values in the user_response parameter.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-05T00:07:09Z","date_published":"2026-11-05T00:07:09Z","id":"https://feed.craftedsignal.io/briefs/2026-11-6valley-auth-bypass/","summary":"A vulnerability in the 6valley 16.0 Social Login Flow allows remote attackers to bypass authorization by manipulating the user_response argument during account verification.","title":"6amTech 6valley: Authorization bypass in Social Login Flow (CVE-2026-122019)","url":"https://feed.craftedsignal.io/briefs/2026-11-6valley-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - 6valley (16.0)","version":"https://jsonfeed.org/version/1.1"}