SourceHut disabled registration bypass | CVE-2026-121728

November 5, 2026 at 12:34

Quality: 8/10 Relevance: 9/10

Summary

The article analyzes a CVE-2026-121728 vulnerability in SourceHut where registration is bypassed when registration is disabled. It explains the flawed authentication flow and CSRF token handling, and notes CVE assignment and recommended mitigations.

Vulnerability & CVE Security

Read Original Article