[ Vendor · 5 CVEs ]
esaqa GmbH
CVEs affecting esaqa GmbH published in the last 30 days, plus any esaqa GmbH CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-117471 | 27 Oct 2026 | CVSS 5.4 | esaqa GmbH PsonoPsono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo device and passed it to the Duo… | |
| CVE-2026-117472 | 27 Oct 2026 | CVSS 4.3 | esaqa GmbH PsonoPsono Server CE && EE versions 4.0.33 through 7.2.3 compared the request path for the bulk-secret-read endpoint with a hard-coded unprefixed path. In… | |
| CVE-2026-117468 | 27 Oct 2026 | CVSS 6.5 | esaqa GmbH PsonoPsono Server versions 5.3.5 through 7.2.3 used a permission class that did not enforce token write scope when claiming a device code. An… | |
| CVE-2026-117469 | 27 Oct 2026 | CVSS 5.4 | esaqa GmbH PsonoPsono Server (CE & EE) versions 1.0.0 through 7.2.3 did not enforce the direction of file-transfer credentials on file-repository operations. An… | |
| CVE-2026-117470 | 27 Oct 2026 | CVSS 6.5 | esaqa GmbH PsonoPsono Server CE & EE versions 3.1.0 through 7.2.3 did not consume a stored WebAuthn challenge after assertion verification. An unauthenticated remote… |