Skip to content
OpenAdvisories

Vendor

a466350665

4 known vulnerabilities.

Products

smart-sso 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-121543

    smart-sso through 2.0.1 Incorrect Authorization in PermissionFilter Enables Admin Escalation

    smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any authenticated user to call admin console APIs because unlisted paths are permitted by default. Attackers can call /admin/user-role/save to assign the…

    a466350665 smart-sso