OAuth Single Sign On – SSO (OAuth Client) vulnerabilities

Product

OAuth Single Sign On – SSO (OAuth Client)

by cyberlord92 · last CVE Feb 6, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 2Low 0

Severity

Exploitation

Watch

Add OAuth Single Sign On – SSO (OAuth Client) to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-9485	9.8	1%	Oct 4	OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Authentication Bypass via get_resource_owner_from_id_token() Affected: through 6.26.12
CVE-2024-10111	8.1	1%	Dec 12	OAuth Single Sign On – SSO (OAuth Client) <= 6.26.3 - Authentication Bypass Affected: through 6.26.3
CVE-2025-10753	5.3	0%	Feb 6	OAuth Single Sign On – SSO (OAuth Client) <= 6.26.14 - Missing Authorization Affected: through 6.26.14
CVE-2025-10752	4.3	0%	Sep 26	OAuth Single Sign On – SSO (OAuth Client) <= 6.26.12 - Cross-Site Request Forgery Affected: through 6.26.12