{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/databasement--1.10.9/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:databasement:databasement:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":8.1,"id":"CVE-2026-121939"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-121939\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["Databasement (\u003c 1.10.9)"],"_cs_severities":["high"],"_cs_tags":["authentication-bypass","identity-takeover","oidc","web-security"],"_cs_type":"advisory","_cs_vendors":["Databasement"],"content_html":"\u003cp\u003eDatabasement before version 1.10.9 contains an authentication bypass vulnerability in the OAuthService::findOrCreateLocalUser() method. The application fails to validate the email_verified claim when linking OIDC identities to local users, allowing an attacker to associate an identity provider account with a victim's email address and authenticate as that user. This allows an attacker to take over any local account, including super-admin accounts, and maintain access even after password resets.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for unauthorized authentication as any system user, including accounts with administrative privileges, leading to full account takeover and persistent unauthorized access.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003eUpdate Databasement to version 1.10.9 or later to remediate the vulnerability in OAuthService::findOrCreateLocalUser().\u003c/p\u003e\n","date_modified":"2026-11-04T16:03:33Z","date_published":"2026-11-04T14:47:31Z","id":"https://feed.craftedsignal.io/briefs/2026-11-databasement-auth-bypass/","summary":"Databasement versions prior to 1.10.9 contain an authentication bypass vulnerability where unverified OIDC emails are linked to local accounts, allowing attackers to assume control of administrative accounts.","title":"Databasement: Authentication bypass in OAuthService (CVE-2026-121939)","url":"https://feed.craftedsignal.io/briefs/2026-11-databasement-auth-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Databasement (\u003c 1.10.9)","version":"https://jsonfeed.org/version/1.1"}