VulnerabilityDeferred

CVE-2026-79577

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request.

UnscoredEPSS 0.14%

Does this matter?

Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.

Description

An issue in the /cas/login component of sso-master v1.0.0 allows attackers to authenticate into the application without a password via sending a crafted POST request.

CVSS: Not yet scored
EPSS: 0.14% probability · 4th percentile
CISA KEV: Not listed
Source: cve@mitre.org

References

https://github.com/fangtang7/CVE/blob/main/sso-master/sso.md

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.