01 Record

CVE-2026-77264

Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

CriticalPUBLISHEDCNA: Wordfence

Base score9.8 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

02 Description

Automation Web Platform <= 4.8.6 - Unauthenticated Authentication Bypass via 'otp_transient' Token Disclosure

Published

2026-08-21 07:39Z17 HR AGO

Last updated

2026-08-21 10:55Z14 HR AGO

Reserved

2026-08-20

Assigning CNA

Wordfence

Record state

PUBLISHED

Severity

Critical (CVSS 9.8)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

SSVC decision

ExploitationnoneAutomatableyesTechnical Impacttotal

Data version

5.2

Document digest

45cf43849f57d45060642aaadff122587599cec8c89c6b471071201005a9e41d

VendorProductVersionsPlatforms