CVE Intelligence

Xerj Console API vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Xerj Console API: 1 record(s), with affected versions and fixes.

CVE-2026-97406 Unknown Oct 20, 2026
Authentication Bypass via Bearer Tokens to Unauthorized Credential Minting
XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials.