CVE-2026-97737
In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeover.
- Published Sep 25, 2026
- CVSS 7.4 high
- 0.3% chance of exploitation in the next 30 days (EPSS)
- A fix is available