Skip to content

CVE-2026-123800

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
November 10, 2026
Last Seen
November 10, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-123800 is a vulnerability in SuperTokens Core that allows an API key from one application to overwrite the parent connection URI domain's configuration, affecting sibling applications. This flaw arises from a permission check that fails to validate the caller's application identity, enablin...

Public Exploits

Checking GitHub for proof-of-concept code…