Tor to the World · story 294 · official · 1 source(s)

CVE-2026-97063: Critical authentication bypass in X-SpringBoot

X-SpringBoot through 6.0 returns login verification codes in HTTP responses from unauthenticated endpoints, allowing attackers to hijack accounts.

Open in the desk

Coverage

• CVE-2026-97064: Critical hardcoded verification code in X-SpringBoot NVD: critical CVEs · tier A · clear net · 2026-09-25 19:17 UTC
• CVE-2026-97063: Critical authentication bypass in X-SpringBoot NVD: critical CVEs · tier A · clear net · 2026-09-25 19:17 UTC

What this site indexes