{"id":"CVE-2026-77172","published":"2026-10-27T17:17:02.933","lastModified":"2026-10-27T17:17:02.933","description":"App passwords were allowed to bypass password confirmation on sensitive endpoints.","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N","cwes":["CWE-269"],"vendors":[],"products":[],"references":[{"url":"https://hackerone.com/reports/3566607","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}