Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Jstyles

#52594of 53,622
3.7Total CVSS
Vulnerabilities · 1
PT-2026-27123
3.7
2026-03-23
Unknown · Hybridauth · CVE-2026-4587
**Name of the Vulnerable Software and Affected Versions** HybridAuth versions up to 3.12.2 **Description** A flaw exists in HybridAuth related to improper certificate validation within the SSL Handler component. This is due to the manipulation of the `curlOptions` argument in the src/HttpClient/Curl.php file. The issue is remotely exploitable and is considered to have high complexity and difficult exploitability. The project was notified of the issue but has not yet responded. **Recommendations** Update HybridAuth to a version beyond 3.12.2.