CVE-2026-45720
Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token
CVSS score
7.0
EPSS probability
%0.1
Risk score
0.0
Published
27 d ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
3.3
CVE-2026-77564
Talos Linux: Support bundle does not redact registry credentials
S
Patch status unknown
7.5
CVE-2025-59836
NULL pointer dereference in Siderolabs Omni
S
Patch verified Public Exploits:1EPSS %1
7.5
CVE-2025-61688
Information exposure in Siderolabs Omni
S
Patch status unknownEPSS %0
2.7
CVE-2026-45723
Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic
S
Patch status unknownEPSS %0
7.6
CVE-2026-45726
Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService
S
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-45720"