CVE WATCH / VULNERABILITY DETAIL
CVE-2026-115910
MEDIUMCVSS 6.8NVD feed
Published 26 October 2026 · tracked since 27 October 2026
Description
Python Social Auth is a social authentication and registration mechanism. Prior to 6.2.0, OpenIdConnectAuth in social_core/backends/open_id_connect.py uses get_and_store_nonce to place the OpenID Connect nonce in a shared OpenIdConnectAssociation table, and get_nonce and validate_claims verify only
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-72752 MEDIUM 6.5
- CVE-2026-50095 MEDIUM 6.1
- CVE-2026-116398 MEDIUM 6.5
- CVE-2026-116400 MEDIUM 6.5
- CVE-2026-115922 MEDIUM 6.2
- CVE-2026-115923 MEDIUM 6.5
- CVE-2026-115966 MEDIUM 6.5
- CVE-2026-115918 MEDIUM 6.5
- CVE-2026-115919 MEDIUM 6.2
- CVE-2026-115920 MEDIUM 6.2