Back to the CVE list

CVE-2026-85984Suited to automated attack · CISA

miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter

CVSS score

9.8

EPSS probability

%0.7

Risk score

0.1

Published

23 d ago

Overview Public Exploits (0)Newsroom Vulnerability Timeline

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

No verified news item has been matched to this CVE yet.

Similar Vulnerabilities

9.8

CVE-2026-15013SAML Single Sign On <= 5.4.3 - Unauthenticated Authentication Bypass via 'SAMLResponse' Parameter Signature Algorithm Confusion

Vendorcyberlord92 ProductSAML Single Sign On – SSO Login

Patch status unknown Public Exploits:1EPSS %23 mo ago

7.5

CVE-2026-12000Page and Post Restriction <= 1.4.1 - Unauthenticated Missing Authorization to Sensitive Information Exposure via REST API

Vendorcyberlord92 ProductPage and Post Restriction

Patch status unknownEPSS %12 mo ago

8.1

CVE-2026-103895miniOrange OTP Login, Verification and SMS Notifications <= 5.5.8 - Unauthenticated Authentication Bypass via Delay OTP Grace State

Vendorcyberlord92 ProductminiOrange OTP Login, Verification and SMS Notifications

Patch status unknownEPSS %04 d ago

7.5

CVE-2026-75807SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoning

Vendorcyberlord92 ProductSAML Single Sign On – SSO Login

Patch status unknownEPSS %01 mo ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-85984"