CVE-2026-122019

HIGH 7.3

6amTech 6valley Social Login Flow existing-account-check existingAccountCheck authorization

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was identified in 6amTech 6valley 16.0. Impacted is the function existingAccountCheck of the file /api/v1/auth/existing-account-check of the component Social Login Flow. Such manipulation of the argument user_response leads to authorization bypass. The attack may be launched remotely. The exploit is publicly available and might be used.

CWE	CWE-639 CWE-285
Vendor	6amtech
Product	6valley
Published	Nov 4, 2026

Stay Ahead of the Next One

Get instant alerts for 6amtech 6valley

Be the first to know when new high vulnerabilities affecting 6amtech 6valley are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

6amTech / 6valley

16.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/431085 vuldb.com: https://vuldb.com/vuln/431085/cti vuldb.com: https://vuldb.com/cve/CVE-2026-122019 vuldb.com: https://vuldb.com/submit/1024992 github.com: https://github.com/oscar2744/CVE-Submit/issues/3

Credits

🔍 havel8964 (VulDB User)