{"id":"CVE-2026-126129","published":"2026-11-10T22:18:31.733","lastModified":"2026-11-10T22:18:31.733","description":"The Auth0 ASP.NET Core Authentication SDK incorrectly determines a session's OIDC Back-Channel Logout status, which may result in a logged-out session being accepted for access to protected endpoints.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-287","CWE-807","CWE-1254"],"vendors":[],"products":[],"references":[{"url":"https://trust.okta.com/security-advisories/improper-backchannel-session-revocation-in-the-auth0-asp-net-core-authentication-sdk-cve-2026-126129","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}