Question 1

What is CVE-2026-15616 — CVE-2026-15616?

Accepted Answer

Logto does not enforce locally configured MFA during SSO authentication, allowing users to bypass second-factor requirements and grants unauthorized access.

Question 2

What is the authoritative source for CVE-2026-15616?

Accepted Answer

CVE-2026-15616 (CVE-2026-15616) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-15616CVE-2026-15616

Description

Scoring