CVE-2026-122019
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Nov 04, 2026
Vendor
unknown
Description
A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument user_response leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used.