not scored yet · published 2026-11-10
The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a logged-out session being accepted for access to protected endpoints.
Weakness: CWE-287, CWE-807, CWE-1254
Source: NVD CVE-2026-126129
Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.