Vendor

Code100x

1 brief RSS

code100x Mobile API Authentication Bypass Vulnerability (CVE-2026-8890)

code100x Mobile API contains an authentication bypass vulnerability (CVE-2026-8890) allowing unauthenticated attackers to impersonate arbitrary users by crafting a JSON payload in the 'g' HTTP header, skipping identity header validation and granting unauthorized access to course data.

code100x Mobile API authentication-bypass mobile-api cve-2026-8890 credential-access privilege-escalation

2r 2t 1h ago