https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T18:31:45.748479+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351018 EUVD-2026-351018 2026-10-09T18:31:45.806885+00:00 EUVD-2026-351018 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72537 fkie_cve-2026-72537 2026-10-09T18:31:45.806927+00:00

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user ingest function adopts pre-existing local accounts by username without validating scope boundaries. An attacker can rewrite or delete any account, including the superuser, using only a limited provisioning credential.

 https://cve.radiocsirt.org/vuln/ghsa-f25x-j567-ffxh GHSA-f25x-j567-ffxh 2026-10-09T18:31:45.806964+00:00

A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that matches an existing local user by username. The SCIM user ingest function adopts pre-existing local accounts by username without validating scope boundaries. An attacker can rewrite or delete any account, including the superuser, using only a limited provisioning credential.