CVE-2025-15586

OGP-Website <52f865a - Auth Bypass

Title source: llm

Description

OGP-Website installs prior git commit 52f865a4fba763594453068acf8fa9e3fc38d663 are affected by a type juggling flaw which if exploited can result in authentication bypass without knowledge of the victim account's password.

Scores

EPSS 0.0011
EPSS Percentile 30.0%

Classification

CWE
CWE-287
Status draft

Timeline

Published Feb 19, 2026
Tracked Since Feb 19, 2026