CVE-2026-34456

{
  "id": "CVE-2026-34456",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-01T20:16:26.120",
  "lastModified": "2026-10-26T22:10:00.163",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go. From version 26.2.0-beta.1 to before version 26.2.0-beta.5, a vulnerability in the OAuth authentication flow allowed automatic linking of social accounts based solely on matching email addresses. An attacker could create or control a social account (e.g., Google, GitHub, Discord) using a victim’s email address and gain full access to the victim's account without knowing their password. This results in a full account takeover with no prior authentication required. This issue has been patched in version 26.2.0-beta.5."
    },
    {
      "lang": "es",
      "value": "Reviactyl es un panel de gestión de servidor de juegos de código abierto construido usando Laravel, React, FilamentPHP, Vite y Go. Desde la versión 26.2.0-beta.1 hasta antes de la versión 26.2.0-beta.5, una vulnerabilidad en el flujo de autenticación OAuth permitía la vinculación automática de cuentas sociales basada únicamente en la coincidencia de direcciones de correo electrónico. Un atacante podía crear o controlar una cuenta social (p. ej., Google, GitHub, Discord) usando la dirección de correo electrónico de una víctima y obtener acceso total a la cuenta de la víctima sin conocer su contraseña. Esto resulta en una toma de control total de la cuenta sin requerir autenticación previa. Este problema ha sido parcheado en la versión 26.2.0-beta.5."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "reviactyl",
          "product": "panel",
          "versions": [
            {
              "version": ">= 26.2.0-beta.1, < 26.2.0-beta.5",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
          "baseScore": 9.1,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.2
      },
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-04-02T14:16:51.333124Z",
          "id": "CVE-2026-34456",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    },
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:reviactyl:reviactyl:26.2.0:beta1:*:*:*:*:*:*",
              "matchCriteriaId": "F8D3FEB3-9EB8-4856-8B4B-C729D5DC1DC4"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:reviactyl:reviactyl:26.2.0:beta2:*:*:*:*:*:*",
              "matchCriteriaId": "E82FD16F-ED7D-4C6C-A039-F3A4F418BCFC"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:reviactyl:reviactyl:26.2.0:beta3:*:*:*:*:*:*",
              "matchCriteriaId": "D2FE3906-FD27-43A5-8012-7A61FC395D3A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:reviactyl:reviactyl:26.2.0:beta4:*:*:*:*:*:*",
              "matchCriteriaId": "C12D8410-5633-4819-9EAF-B7A08351F540"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/reviactyl/panel/commit/fe0c29fc62fefe354c9ab8936dfe30fdb586a896",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "https://github.com/reviactyl/panel/releases/tag/v26.2.0-beta.5",
      "source": "[email protected]",
      "tags": [
        "Product",
        "Release Notes"
      ]
    },
    {
      "url": "https://github.com/reviactyl/panel/security/advisories/GHSA-8mcf-rp68-xhfg",
      "source": "[email protected]",
      "tags": [
        "Mitigation",
        "Patch",
        "Vendor Advisory"
      ]
    }
  ]
}