CVE-2026-115967
High · 8.8CVSS
8.8
EPSS
—
Published
Oct 29, 2026
CISA due date
—
The record
Weak Authentication vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Authentication Abuse.This issue affects Login with phone number: from n/a through 1.8.78.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2025-30414 Local privilege escalation due to improper authentication. CWE-1390
- CVE-2026-85939 Weak authentication in Windows Kernel allows an authorized attacker to bypass a security… CWE-1390
- CVE-2026-83840 Weak authentication in Windows Error Reporting allows an authorized attacker to elevate… CWE-1390
- CVE-2026-83674 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390
- CVE-2026-83657 Weak authentication in Windows Modern Device Management (MDM) allows an authorized… CWE-1390
- CVE-2026-83586 Weak authentication in Windows Resilient File System (ReFS) Deduplication Service allows… CWE-1390
- CVE-2026-83511 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390
- CVE-2026-70005 Weak authentication in Active Directory Federation Services (AD FS) allows an… CWE-1390