Miniorange Headless Single Sign On

2 CVEs affecting Miniorange Headless Single Sign On. Latest disclosed: 2026-08-13. Critical: 2, High: 0.

Top CVEs affecting Miniorange Headless Single Sign On
CVE	Severity	Score	Published	Summary
`CVE-2026-28149`	Critical	`9.8`	2026-08-13	Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
`CVE-2026-28148`	Critical	`9.8`	2026-08-13	Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.