CVE-2026-93354 Taskview Community Missing Authentication via OAuth Dynamic Client Registration
PublishedTaskview Community before 1.56.0 contains a missing authentication vulnerability that allows unauthenticated attackers to register arbitrary OAuth clients and take over user accounts by exploiting the OAuth 2.0 Dynamic Client Registration endpoint, which is enabled by default and...