CVE search · CVE-2026-126129
CVE-2026-126129
not scored
The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a logged-out session being accepted for access to protected endpoints.
Details
- Status
- Received
- Published
- Last changed
- Source
- psirt@okta.com
Severity
No CVSS score yet. The NVD may still be analysing this CVE.