Is CVE-2026-57807 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-57807?

CVE-2026-57807 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-57807

Description

Authentication Bypass Using an Alternate Path or Channel vulnerability in miniOrange Security Software Pvt Ltd. OAuth Single Sign On - SSO (OAuth Client) allows Password Recovery Exploitation. This issue affects OAuth Single Sign On - SSO (OAuth Client): from n/a through 38.5.8.