roostorg coop

• CVE-2026-63400 Low 2.3 Coop sessions are not invalidated on password reset 0.3%
• CVE-2026-63398 High 7.4 Coop has SAML cross-tenant authentication bypass 0.2%
• CVE-2026-63401 Medium 5.3 Coop has cross-org IDOR in addAccessibleQueuesForUser / removeAccessibleQueuesForUser 0.3%
• CVE-2026-63396 High 8.7 Coop has a data leak via unauthenticated GraphQL Query.allOrgs 0.3%
• CVE-2026-63399 Medium 6.9 Coop: Unauthenticated org provisioning via GraphQL Mutation.createOrg 0.3%