Skip to content
Threat Feed
Subscribe

Vendor

Smart-Sso

1 brief RSS
high advisory

smart-sso: Incorrect authorization in PermissionFilter (CVE-2026-121543)

An incorrect authorization vulnerability in smart-sso versions 2.0.1 and earlier allows authenticated users to access administrative APIs due to a permissive default configuration in PermissionFilter.

PoC smart-sso privilege-escalation authentication-bypass web-application
1r 1t 1c