Advisories · Technology

a466350665 smart-sso.

Every CVE that names a466350665 smart-sso among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-121543 CVE record

CVSS 8.7 High

smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation
- a466350665 smart-sso
- Broken access control
Not analysed yet 3 Nov 2026
CVE-2026-111622 CVE record

CVSS 7.6 High

smart-sso through 2.1.1 OAuth2 Authorization Code Theft via Unvalidated redirectUri
- a466350665 smart-sso
- Open redirect
Not analysed yet 16 Oct 2026
CVE-2026-2972 CVE record

CVSS 4.8 Medium

a466350665 Smart-SSO Role Edit UserController.java save cross site scripting
- a466350665 Smart-SSO
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 23 Feb 2026
CVE-2026-2971 CVE record

CVSS 5.3 Medium

a466350665 Smart-SSO Login login.html cross site scripting
- a466350665 Smart-SSO
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 23 Feb 2026