PatchSiren

authelia CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

LOW authelia CVE published 2026-06-19

CVE-2026-48794

CVE-2026-48794 is a low-severity vulnerability in Authelia, an open-source authentication and authorization server. The issue arises from a lack of domain canonicalization in specific edge cases, potentially allowing an attacker to bypass access control rules under certain conditions. The vulnerability has a CVSS score of 1.3, indicating a low severity. Affected versions are 4.36.0 through 4.39.19, and th [truncated]