CVE-2026-75932
CVE-2026-75932
Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is populated with the victim's OAuth Client ID and Client Secret if the victim is using an OAuth provider.
Vulnerability class: Broken Access Control
CVSS v3 metric
CVSS v3 base score 8.6 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H.
Weakness classification (CWE)
References
- 9119a7d8-5eab-497f-8521-727c672e3725 (third-party-advisory)
- 9119a7d8-5eab-497f-8521-727c672e3725 (vdb-entry)
- 9119a7d8-5eab-497f-8521-727c672e3725 (product)
Frequently asked questions
- What is CVE-2026-75932?
- CVE-2026-75932 is a high-severity vulnerability, classified under Missing Authorization. CVSS score: 8.6/10. Published 2026-08-21.
- How severe is CVE-2026-75932?
- High severity. CVSS v3 base score is 8.6 out of 10.