Omnivore API Authentication Bypass in Apple Sign-In (CVE-2026-82454)

A CVSS 9.3 authentication bypass in Apple Sign-In leads this run, plus two qs library CVEs.

2026-08-30 01:56 UTC

🔓 CVEs & KEV

CVE-2026-82454 — CVSS 9.3 — Omnivore API Authentication Bypass in Apple Sign-In (CVE-2026-82454)
CVE-2026-82562 — CVSS 6.3 — qs.parse does not enforce arrayLimit on comma groups under bracket-push keys ...
CVE-2026-82417 — CVSS 6.3 — qs.stringify throws TypeError on objects with a non-callable constructor.isBu...

Start with the free Posture Self-Check to see where you stand against the current threat landscape.