CVE-2026-67331Proof of concept (PoC) published · CISA
better-auth SCIM 1.5.0 before 1.7.0-beta.4 Authorization Bypass
CVSS score
8.7
EPSS probability
%0.4
Risk score
0.0
Published
2 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.3
CVE-2026-110862
Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic Link
B
Patch status unknown
9.1
CVE-2026-110864
Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth Proxy
B
Patch status unknown
8.6
CVE-2026-110863
Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO Providers
B
Patch status unknown
6.3
CVE-2026-110861
Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race Condition
B
Patch status unknown
9.4
CVE-2026-67330
better-auth SCIM 1.4.0-beta.27 through 1.6.21 Account Takeover via Provider-ID Collision
B
Patch status unknownEPSS %1
8.8
CVE-2025-71399
Better Auth before 1.4.5 Path Normalization Bypass via rou3
B
Patch verifiedEPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-67331"