CVE-2026-79664Proof of concept (PoC) published · CISA
Ech0 before 4.7.3 Access Token Revocation Bypass
CVSS score
9.1
EPSS probability
%0.3
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
8.7
CVE-2026-79665Ech0 before 4.5.1 Authorization Bypass via Session Tokens
Patch status unknownEPSS %1
8.7
CVE-2026-79658Ech0 before 5.0.1 Denial of Service via Accept-Language
Patch status unknownEPSS %1
8.5
CVE-2026-79673Ech0 before 4.4.3 Scope Bypass via profile:read Token
Patch status unknownEPSS %0
6.9
CVE-2026-79668Ech0 before 4.7.3 Unauthenticated Like Endpoint Metric Inflation
Patch status unknownEPSS %0
6.9
CVE-2026-79661Ech0 before 4.7.3 Unauthenticated fav_count Modification
Patch status unknownEPSS %0
8.8
CVE-2026-79662Ech0 before 4.7.3 OAuth Redirect URI Validation Bypass
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-79664"