CVE-2026-9092
Quick assessment
Affected
Casdoor Casdoor
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Casdoor是Casdoor开源的一个支持多种身份验证和授权协议的开源平台。 Casdoor 2.362.0及之前版本存在安全漏洞，该漏洞源于未验证的电子邮件绑定问题，可能导致账户接管，因为getExistUserByBindingFunction函数通过电子邮件匹配用户而未检查上游提供商中的email_verified声明，idp.UserInfo结构甚至不包含EmailVerified字段，攻击者可以从上游提供商提供未经验证的电子邮件声明来接管使用相同电子邮件地址的账户。
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-9092
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
CVE-2026-9092
Source: CVE Program / CVE List V5
Vulnerability Description
Casdoor versions 2.362.0 and earlier contain a vulnerability involving unverified email binding that may enable account takeover. The getExistUserByBindingRule function matches users by email without checking the email_verified claim from upstream providers; the idp.UserInfo struct does not even include a EmailVerified field. An attacker can supply an unverified email claim from an upstream provider to take over accounts that use the same email address.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Casdoor 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Casdoor是Casdoor开源的一个支持多种身份验证和授权协议的开源平台。 Casdoor 2.362.0及之前版本存在安全漏洞，该漏洞源于未验证的电子邮件绑定问题，可能导致账户接管，因为getExistUserByBindingFunction函数通过电子邮件匹配用户而未检查上游提供商中的email_verified声明，idp.UserInfo结构甚至不包含EmailVerified字段，攻击者可以从上游提供商提供未经验证的电子邮件声明来接管使用相同电子邮件地址的账户。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-9092
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-9092
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-9092 (1)
Same Patch Batch · Casdoor · 2026-05-28 · 9 CVEs total
| CVE-2026-9091 | CVE-2026-9091 | |
| CVE-2026-9090 | CVE-2026-9090 | |
| CVE-2026-9095 | CVE-2026-9095 | |
| CVE-2026-9093 | CVE-2026-9093 | |
| CVE-2026-9097 | CVE-2026-9097 | |
| CVE-2026-9098 | CVE-2026-9098 | |
| CVE-2026-9094 | CVE-2026-9094 | |
| CVE-2026-9096 | CVE-2026-9096 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-9092
No comments yet