ikaros-dev

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

ikaros-dev records in CISA KEV

No ikaros-dev vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-71983 CVE-2026-110097 · GHSA-hj5g-wfrp-6x6g

Ikaros authentication bypass lets attackers skip TOTP verification

HIGH 72

Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password to skip TOTP verification by reusing the login temp token.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00541 Published 2026-10-13 No fix listed CWE-287

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0