WhisperX tag archive

#CVE-2026-33472

This page collects WhisperX intelligence signals tagged #CVE-2026-33472. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (1)

The Lab · 2026-04-17 12:22:55 · GitHub Issues

1. Cryptomator Hub OAuth Token Exchange HTTP Downgrade Bypass Exposed (CVE-2026-32303)

A critical logic flaw in Cryptomator Hub's OAuth flow allows attackers to bypass a previous security fix and force a downgrade to plaintext HTTP, exposing user access tokens. The vulnerability, tracked as CVE-2026-33472, resides in the `CheckHostTrustController.getAuthority()` method of version 1.19.1. This method inco...

#CVE-2026-33472#OAuth#Encryption#Vulnerability#Authentication Bypass