Sploitus

CVE-2026-55982

No indexed exploits for CVE-2026-55982 yet

OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes

Affected products
Gitea, Red Os
CVSS 3.1
9.1 CRITICAL
EPSS
0.4% (30th percentile)
Weakness
CWE-200
NVD status
Received
Published
2026-08-13
CVE-2026-55982 at NVD
Authoritative description, scoring and affected products

No indexed exploits for CVE-2026-55982 yet

Our index is partial: it proves presence, never absence

No exploit for CVE-2026-55982 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.