CVE-2026-97406
XERJ Console API bearer tokens can bypass the passkey‑only authentication requirement and directly invoke the API‑token creation endpoint, allowing unauthorized minting of persistent successor credentials.
타임라인
🎭 이 CVE, 다음 위협조직 관련 보도와 함께 언급됨: Lazarus