PT-2026-79398
CVE-2026-75932
·
Published
2026-08-21
·
Updated
2026-10-22
Description by
CVSS 3.1
8.6
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions
Jet Admin (affected versions not specified)
Description
An attacker can create a malicious application and connect it to a target user's custom domain. By editing the authentication configuration, the attacker can reroute traffic to the application they control. If the victim uses an OAuth provider, the attacker's workspace is populated with the victim's OAuth Client ID and Client Secret.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾