Skip to content
OpenAdvisories

Vendor

mlogclub

4 known vulnerabilities.

Products

bbs-go 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-111639

    bbs-go through 4.4.6 Account Takeover via Google One Tap Login

    bbs-go through 4.4.6 contains an authentication bypass vulnerability in the /api/login/google_one_tap endpoint that allows remote attackers to log in as other users by submitting Google ID tokens issued to any OAuth client. Attackers operating their own Googl…

    mlogclub bbs-go