Login Request a demo
PS
Product
Psono
by esaqa GmbH · last CVE Oct 27, 2026
5
CVEs
0
On KEV
6.5
Max CVSS
5
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 0Medium 5Low 0
Severity
All severities5Critical0High0Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Psono to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-117470
New
6.5
0%
Oct 27
WebAuthn assertion replay permits second-factor bypass in Psono Server
Affected: 3.1.0 before 7.2.4
CVE-2026-117468
New
6.5
0%
Oct 27
Device-code claim permits restricted token escalation in Psono Server
Affected: 5.3.5 before 7.2.4
CVE-2026-117471
New
5.4
0%
Oct 27
User-controlled Duo host permits authenticated SSRF in Psono Server
Affected: 0.1.0 before 7.2.4
CVE-2026-117469
New
5.4
0%
Oct 27
File-transfer type confusion permits unauthorized repository writes in Psono Server
Affected: 1.0.0 before 7.2.4
CVE-2026-117472
New
4.3
0%
Oct 27
URL prefix handling permits API key read-scope bypass in Psono Server
Affected: 4.0.33 before 7.2.4
Showing 5