All 5 CVE vulnerabilities found in Psono, with AI-generated Chinese analysis, references, and POCs.
Vendor: esaqa GmbH
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-117472 | URL prefix handling permits API key read-scope bypass in Psono Server CWE-863 | 4.3 | Medium | 2026-10-27 |
| CVE-2026-117471 | User-controlled Duo host permits authenticated SSRF in Psono Server CWE-918 | 5.4 | Medium | 2026-10-27 |
| CVE-2026-117470 | WebAuthn assertion replay permits second-factor bypass in Psono Server CWE-294 | 6.5 | Medium | 2026-10-27 |
| CVE-2026-117469 | File-transfer type confusion permits unauthorized repository writes in Psono Server CWE-862 | 5.4 | Medium | 2026-10-27 |
| CVE-2026-117468 | Device-code claim permits restricted token escalation in Psono Server CWE-269 | 6.5 | Medium | 2026-10-27 |
All 5 known CVE vulnerabilities affecting Psono with full Chinese analysis, references, and POCs where available.