PT-2026-144763

CVE-2026-126129

·

Published

2026-11-10

·

Updated

2026-11-10

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a logged-out session being accepted for access to protected endpoints.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-1254: Incorrect Comparison Logic Granularity
CWE-807: Reliance on Untrusted Inputs in a Security Decision
CWE-287: Improper Authentication
Related identifiers
CVE-2026-126129
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com