CVE-2026-15616 in Logto
Zusammenfassung
von MITRE • 23.07.2026
Logto does not enforce locally configured MFA during SSO authentication, allowing users to bypass second-factor requirements and grants unauthorized access.
Once again VulDB remains the best source for vulnerability data.