Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-35511

1 brief RSS
high advisory

Authorizer Zero-Click Account Takeover via OAuth Identity Linking

Authorizer suffers from a zero-click account takeover vulnerability (CVE-2026-35511) where attackers can link OAuth identities to unverified accounts, gaining persistent password access to victim accounts.

authorizer account-takeover oauth authentication-bypass cve-2026-35511
2t