← All credits
tenzai
3 vulnerability records and advisories credit this contributor.
CVE-2026-81906
[UNREVIEWED] OAuth Callback Login Bypasses Deactivated-Account Checks
CVE-2026-81905
Concrete CMS below 9.5.3 does not enforce validation-hash type on redemption, allowing a hash issued for one purpose to be redeemed for another.
CVE-2026-81904
Concrete CMS before 9.5.3 is vulnerable to Missing Authorization in Stack/Container Sub-Block Asset Registration