CVE-2026-55369 | walinejs Waline up to 1.41.0 Login Endpoint /api/token email improper authentication

October 28, 2026 Yanac

A vulnerability classified as critical has been found in walinejs Waline up to 1.41.0. This affects an unknown part of the file /api/token of the component Login Endpoint. The manipulation of the argument email leads to improper authentication.

This vulnerability is traded as CVE-2026-55369. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More