CVE-2026-97406
Authentication Bypass via Bearer Tokens to Unauthorized Credential Minting
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials.
| Vendor | xerj |
| Product | console api |
| Published | Oct 20, 2026 |
| Last Updated | Oct 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for xerj console api
Be the first to know when new unknown vulnerabilities affecting xerj console api are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Xerj / Console API
v1.0.0-rc.11