cyberlord92 vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 202411
3. 202513
4. 202614

Newest CVEs

• CVE-2026-118194

  Page and Post Restriction <= 1.6.1 - Unauthenticated Authentication Bypass via REST API Nonce Bypass via Cookie Re-Authentication

  cyberlord92 · Page and Post Restriction

  Medium6.5
• CVE-2026-103895

  miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State

  cyberlord92 · miniOrange OTP Login, Verification and SMS Notifications

  High8.1
• CVE-2026-85984

  miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter

  cyberlord92 · miniOrange OTP Login, Verification and SMS Notifications

  Critical9.8
• CVE-2026-75807

  SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning

  cyberlord92 · SAML Single Sign On – SSO Login

  High7.5
• CVE-2026-12000

  Page and Post Restriction <= 1.4.1 - Unauthenticated Missing Authorization to Sensitive Information Exposure via REST API

  cyberlord92 · Page and Post Restriction

  High7.5
• CVE-2026-15981

  SAML Single Sign On <= 5.4.4 - Unauthenticated Authentication Bypass via SAMLResponse Parameter

  cyberlord92 · SAML Single Sign On – SSO Login

  Critical9.8
• CVE-2026-15013

  SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion

  cyberlord92 · SAML Single Sign On – SSO Login

  Critical9.8
• CVE-2026-12761

  miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow

  cyberlord92 · miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)

  Critical9.8
• CVE-2026-14245

  miniOrange OTP Login, Verification and SMS Notifications <= 5.5.1 - Authentication Bypass to Administrator Account Takeover via 'username_b' Parameter

  cyberlord92 · miniOrange OTP Login, Verification and SMS Notifications

  Critical9.8
• CVE-2026-2628

  All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login <= 2.2.5 - Authentication Bypass

  cyberlord92 · All-in-One Microsoft 365 & Entra ID / Azure AD SSO Login

  Critical9.8