Skip to content
Threat Feed
Subscribe

Vendor

Databasement

2 briefs RSS
high advisory

Databasement: Authentication bypass in OAuthService (CVE-2026-121939)

Databasement versions prior to 1.10.9 contain an authentication bypass vulnerability where unverified OIDC emails are linked to local accounts, allowing attackers to assume control of administrative accounts.

PoC Databasement authentication-bypass identity-takeover oidc web-security
2t 1c
high advisory

Databasement Authentication Bypass via Improper Invitation Token Validation

Databasement versions before 1.7.14 are vulnerable to an authentication bypass where invitation tokens are improperly validated and cached, allowing attackers to hijack accounts and gain access to managed database credentials.

Databasement authentication-bypass cloud web-application
1t 1c