CVE-2026-7167

The vulnerability arises when the system fails to properly validate the 'email' field during the authentication process, allowing unverified or fake email addresses to be accepted. This lack of validation enables the creation of user accounts with fake email addresses, facilitating the mass creation of fraudulent accounts. Successful exploitation of this vulnerability could allow an authenticated attacker to carry out various attacks, such as mass spam distribution, system abuse, or bypassing user controls, thereby compromising the security and integrity of the system.

• CWE-200

• https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-assassin-game-gaudire

Published

Jun 22, 2026

Last Modified

Jun 22, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-7161An insufficient encryption vulnerability exists in the Devic…9.3
• CVE-2026-7162Successful exploitation of the integer overflow vulnerabilit…7.8
• CVE-2026-7163A vulnerability in the assisted-service REST API, an optiona…5.5
• CVE-2026-7164Incorrect packet validation allowed unbounded recursion pars…7.5
• CVE-2026-7165The vulnerability is present in the ‘/addJugador’ endpoint: …9.4
• CVE-2026-7166Vulnerability involving the exposure of sensitive data provi…9.2
• CVE-2026-7168Successfully using libcurl to do a transfer over a specific …5.3
• CVE-2026-7177A security flaw has been discovered in ChatGPTNextWeb NextCh…7.3
• CVE-2026-7178A weakness has been identified in ChatGPTNextWeb NextChat up…7.3
• CVE-2026-7179A security vulnerability has been detected in OSPG binwalk u…5.3
• CVE-2026-7182Diagram's export module is vulnerable to Path Traversal in s…9.2
• CVE-2026-7183A vulnerability has been found in aligungr UERANSIM up to 3.…5.5