A AegiFlow
MEDIUMCVSS 4.2

CVE-2026-85511

CVE-2026-85511 updated by NVD

Modified
2026-09-20
Sources
nvd

Summary

A flaw was found in EAP's Elytron. An EAP application whose security domain is backed by an Elytron token-realm with oauth2-introspection would allow parameter substitution due to missing URL encoding.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.