AmoyLab

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

AmoyLab records in CISA KEV

No AmoyLab vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-70755 CVE-2026-108865 · GHSA-pfxh-9349-4f24

Authentication bypass in AmoyLab Unla OAuth2 server

MEDIUM 44

AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAuth2 server never authenticates a resource owner.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00324 Published 2026-10-11 No fix listed CWE-287

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0