01 Record

CVE-2026-73683

Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay

CriticalPUBLISHEDCNA: VulnCheck

Base score9.2 CVSS v4.0CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

02 Description

Laravel Socialite Facebook Provider Authentication Bypass via Nonce Replay

Published

2026-08-14 21:32Z50 MIN AGO

Last updated

2026-08-14 21:32Z50 MIN AGO

Reserved

2026-08-13

Assigning CNA

VulnCheck

Record state

PUBLISHED

Severity

Critical (CVSS 9.2)

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

43c48b7df9e5acefa1c217b89cb342bcc8f650c45bb64e9342ecee74bfa91d39

VendorProductVersionsPlatforms

LaravelSocialite0 to < 5.29.0—