a466350665 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH a466350665 CVE published 2026-10-16

CVE-2026-111622

CVE-2026-111622 smart-sso through 2.1.1 OAuth2 Authorization Code Theft via Unvalidated redirectUri AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-16T17:38:58.736Z and has not been modified since then. The vulnerability is an open redirect issue in the /login handler of smart-sso through 2.1.1 that allows unauthenticated attackers to steal OAuth [truncated]