TI-2026-85956 CVE-2026-123618 · GHSA-xh2v-vqcx-cgpj
Authentication bypass in ABP Framework via external login provider
Priority LOW 33
ABP Framework before 10.7.1 contains an authentication bypass vulnerability that skips account state and two-factor checks when password login succeeds through a registered IExternalLoginProvider.