esaqa GmbH Psono

• CVE-2026-117472 Medium 4.3 URL prefix handling permits API key read-scope bypass in Psono Server 0.3%
• CVE-2026-117471 Medium 5.4 User-controlled Duo host permits authenticated SSRF in Psono Server 0.2%
• CVE-2026-117470 Medium 6.5 WebAuthn assertion replay permits second-factor bypass in Psono Server 0.4%
• CVE-2026-117469 Medium 5.4 File-transfer type confusion permits unauthorized repository writes in Psono Server 0.3%
• CVE-2026-117468 Medium 6.5 Device-code claim permits restricted token escalation in Psono Server 0.5%