VULNERABILITY INTELLIGENCE

CVE-2026-88819

EPSS probability0.17%

CISA KEVNot currently listed

Published2026-09-14

Last modified2026-09-16

Description

In Siglet current and past versions the refresh token handler do not enforce proof of possession of the issuer DID.