All verified exploits

CVE-2026-3432 OAuth Token Authorization Bypass

CVE-2026-3432 is a critical-severity vulnerability. AttackerView checks Sim Studio sites for it with a live exploit check.

Deterministic critical Sim Studio Added cve-verified-cve-2026-3432

Is my site vulnerable to CVE-2026-3432?

Confirms unauthenticated access to the OAuth token endpoint by sending a credential lookup request without a session. Vulnerable instances process the request, proving any user's OAuth tokens for GitHub, Google, Slack, etc. can be stolen.

Is your app exploitable through CVE-2026-3432?

Scan your domain free