CVE-2026-55459 | intranda goobi-viewer-core up to 26.4 OpenId Token Verification AuthenticationEndpoint.verifyOpenIdToken aud improper authentication

October 23, 2026 Yanac

A vulnerability classified as critical was found in intranda goobi-viewer-core up to 26.4. Affected by this vulnerability is the function AuthenticationEndpoint.verifyOpenIdToken of the component OpenId Token Verification. The manipulation of the argument aud results in improper authentication.

This vulnerability is cataloged as CVE-2026-55459. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More