ory

Records15All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

ory records in CISA KEV

No ory vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Polis · all components

TI-2026-25902 CVE-2026-33506

LOW 39

Ory Polis, formerly known as BoxyHQ Jackson, bridges or proxies a SAML login flow to OAuth 2.0 or OpenID Connect.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00474 Published 2026-03-26 Fixed in 26.2.0 CWE-601