{"uuid": "594ef717-32dc-4180-b538-e867a2efdd62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-19863", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117444459178692654", "content": "CVE-2026-19863: EthereumAuthenticator (v12.1.0 \u2013 12.1.12) has a CRITICAL flaw (CVSS 9.3) where login path substrings in resource URLs allow auth bypass. Patch status unconfirmed \u2014 adjust configs to mitigate. https://radar.offseq.com/threat/cve-2026-19863-cwe-288-28283b9ba5fdea3f #OffSeq #CVE202619863 #infosec #vuln", "creation_timestamp": "2026-10-15T10:30:30.012887Z"}