Known vulnerabilities in authentik 2026.8.1

Vendor: Authentik Security Inc
Software: authentik
Version: 2026.8.1
Software CPE: cpe:2.3:a:goauthentik:authentik:*:*:*:*:*:*:*:*
Website: https://goauthentik.io/
Total vulnerabilities: 3
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting authentik version 2026.8.1 authentik 2026.8.1 is affected by 3 vulnerabilities: 1 high, 2 medium Critical High Medium Low

Vulnerabilities (3)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU148588 - Incorrect Authorization
CVE-2026-94609		 CWE-863 Medium
No
No
 2026.2.7, 2026.5.7, 2026.8.2 09.09.2026 SB2026090968
#VU148587 - Reliance on Untrusted Inputs in a Security Decision
CVE-2026-94606		 CWE-807 High
No
No
 2026.2.7, 2026.5.7, 2026.8.2 09.09.2026 SB2026090968
#VU148584 - Improper input validation
CVE-2026-94613		 CWE-20 Medium
No
No
 2026.2.7, 2026.5.7, 2026.8.2 09.09.2026 SB2026090968