Log in Start free

esaqa GmbH

Products

ProductCVEsExploitedLatest
Psono5–Oct 27, 2026

Exploited and recent CVEs

  • CVE-2026-117472 Medium 4.3 URL prefix handling permits API key read-scope bypass in Psono Server 0.3%
  • CVE-2026-117471 Medium 5.4 User-controlled Duo host permits authenticated SSRF in Psono Server 0.2%
  • CVE-2026-117470 Medium 6.5 WebAuthn assertion replay permits second-factor bypass in Psono Server 0.4%
  • CVE-2026-117469 Medium 5.4 File-transfer type confusion permits unauthorized repository writes in Psono Server 0.3%
  • CVE-2026-117468 Medium 6.5 Device-code claim permits restricted token escalation in Psono Server 0.5%