Goauthentik

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 45
    Known Exploited: 0
    9
    Critical Level Threats
    23
    High Level Threats
    10
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-94606

    authentik: MFA Bypass via State Confusion / Parameter Injection in AuthenticatorEmailStage

    Last Modified: Oct 05, 2026
    Published: Sep 24, 2026

    CVE-2026-94609

    authentik: Privilege Escalation to Superuser via Group Hierarchy

    Last Modified: Sep 28, 2026
    Published: Sep 24, 2026

    CVE-2026-94611

    authentik: Stored credentials are readable with view permission alone

    Last Modified: Sep 24, 2026
    Published: Sep 24, 2026

    CVE-2026-94612

    authentik: Authentication bypass via assertion confusion in SAML sources

    Last Modified: Sep 24, 2026
    Published: Sep 24, 2026

    CVE-2026-94613

    authentik: Denial of Service via Document Type Declarations in SAML Messages

    Last Modified: Sep 29, 2026
    Published: Sep 24, 2026
    Items Per Page