Question 1

What is CVE-2026-126129 — CVE-2026-126129?

Accepted Answer

The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a logged-out session being accepted for access to protected endpoints.

Question 2

What is the authoritative source for CVE-2026-126129?

Accepted Answer

CVE-2026-126129 (CVE-2026-126129) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-126129CVE-2026-126129

Description

Scoring