CVE-2026-81921 | Concrete CMS up to 9.5.2 OAuth 2.0 Refresh Token Grant improper authentication

September 15, 2026 Yanac

A vulnerability categorized as critical has been discovered in Concrete CMS up to 9.5.2. This affects an unknown function of the component OAuth 2.0 Refresh Token Grant. Executing a manipulation can lead to improper authentication.

This vulnerability is handled as CVE-2026-81921. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More