CVE-2026-77172: Medium severity vulnerability
Published Oct 27, 2026
·Updated
App passwords were allowed to bypass password confirmation on sensitive endpoints.
Event History
Oct 27, 2026
CVE Published
via MITRE·04:15 PM
Data Sourced
via MITRE·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access is required to exploit this issue?
An attacker needs low-level privileges and network access. Exploitation has high attack complexity and does not require user interaction.
2
What is the likely security impact if exploitation succeeds?
The vulnerability affects integrity, meaning an attacker may be able to perform unauthorized changes through sensitive endpoints. The provided metrics indicate no confidentiality or availability impact.