CVE-2026-97274

Unauthenticated Bypass Vulnerability in OAuth Single Sign On – SSO (OAuth Client) <= 7.1.2 versions.

Published Sep 30, 2026
CVSS 9.8 critical
0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

miniOrange OAuth Single Sign On

CVE-2026-97274 at the National Vulnerability Database