HybridAuth

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

HybridAuth records in CISA KEV

No HybridAuth vulnerabilities are listed in CISA KEV.

1 record

TI-2014-08416 CVE-2014-125116 · GHSA-fqcv-r9mw-p4vw

HIGH 81

A remote code execution vulnerability exists in HybridAuth versions 2.0.9 through 2.2.2 due to insecure use of the install.php installation script.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.02675 Published 2025-07-25 No fix listed CWE-306