CVE-2026-62108

Unauthenticated Broken Authentication in Headless Single Sign On <= 1.7.0 versions.

Published Sep 17, 2026
CVSS 9.8 critical
0.6% chance of exploitation in the next 30 days (EPSS)

Affected software

miniOrange Headless Single Sign On

CVE-2026-62108 at the National Vulnerability Database