CVE-2026-126801

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 12, 2026

Last Seen

November 12, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-126801: OAuth Bypass Vulnerability in Rote Affects User Accounts64.5

A high-impact vulnerability, CVE-2026-126801, has been identified in Rote versions 1.2.0 through 2.6.0, allowing authenticated users to exploit an authorization bypass in the OAuth bind/merge endpoint. This flaw enables attackers to merge any OAuth-bound account into their own, potentially leading t...