Product by Logto

    Logto

    6 known vulnerabilities in Logto (Logto), 0 of them actively exploited (CISA KEV).

    Key figures

    6

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Logto (Logto)
    CriticalCVE-2026-15616

    Local MFA not enforced during SSO sign-in

    		9.1
    CriticalCVE-2026-15611

    Unverified email-based SSO account linking

    		9.1
    CriticalCVE-2026-15617

    Principal/domain lookup without case normalization

    		9.1
    CriticalCVE-2026-15612

    LOIDC nonce validation bypass

    		9.1
    HighCVE-2026-15614

    IdP-initiated SAML sessions not reliably invalidated (replay)

    		7.5
    HighCVE-2026-15615

    SAML <Conditions> element not validated

    		7.5

    All products by Logto