CVE-2026-16215

MEDIUM

geex-arts django-jet OAuth Credential Revoke authorization

Title source: cna
STIX 2.1

Description

A security flaw has been discovered in geex-arts django-jet up to 1.0.8. This impacts an unknown function of the component OAuth Credential Revoke Handler. Performing a manipulation results in missing authorization. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

References (6)

Core 6
Core References
Vdb Entry vdb-entry
VDB-380038 | geex-arts django-jet OAuth Credential Revoke authorization
https://vuldb.com/vuln/380038
Signature, Permissions Required signature permissions-required
VDB-380038 | CTI Indicators (IOB, IOC)
https://vuldb.com/vuln/380038/cti
Third Party Advisory third-party-advisory
CVE-2026-16215 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-16215
Third Party Advisory third-party-advisory
Submit #857946 | geex-arts django-jet 0cc1e636109f680de6759ac30c0b14ef980883bc CWE-862 Missing Authorization
https://vuldb.com/submit/857946

Scores

CVSS v3 6.5
EPSS 0.0032
EPSS Percentile 24.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-862 CWE-863
Status published
Products (9)
geex-arts/django-jet 1.0.0
geex-arts/django-jet 1.0.1
geex-arts/django-jet 1.0.2
geex-arts/django-jet 1.0.3
geex-arts/django-jet 1.0.4
geex-arts/django-jet 1.0.5
geex-arts/django-jet 1.0.6
geex-arts/django-jet 1.0.7
geex-arts/django-jet 1.0.8
Published Jul 19, 2026
Tracked Since Jul 19, 2026