Goauthentik

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 40
    Known Exploited: 0
    9
    Critical Level Threats
    18
    High Level Threats
    10
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-57580

    authentik: Account Takeover via SAML NameID Comment Truncation

    Last Modified: Aug 18, 2026
    Published: Aug 18, 2026

    CVE-2026-55106

    authentik: Unauthenticated LDAP directory data disclosure

    Last Modified: Aug 18, 2026
    Published: Aug 18, 2026

    CVE-2026-61574

    authentik RAC: access any endpoint via an unrelated application

    Last Modified: Aug 19, 2026
    Published: Aug 18, 2026

    CVE-2026-54730

    authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView

    Last Modified: Aug 18, 2026
    Published: Aug 18, 2026

    CVE-2026-49448

    authentik: SourceStage bypass via empty POST

    Last Modified: Jun 04, 2026
    Published: Jun 02, 2026
    Items Per Page