CVE Intelligence

Xerj vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Xerj products: 1 record(s), with severity, exploitation and fixes.

Console API 1

Exploited only (KEV) →

CVE-2026-97406 Unknown Oct 20, 2026
Authentication Bypass via Bearer Tokens to Unauthorized Credential Minting
XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials.