Topic
2 articles
CyberSecureToday covers OAuth across 2 articles published between 23 Sep 2026 and 23 Oct 2026.
The coverage includes 1 vulnerability advisory and 1 analysis or guidance piece. 1 advisory is rated critical or high severity, and 1 involves a flaw listed in CISA's Known Exploited Vulnerabilities catalog.
Stories on OAuth most often intersect with Remote Code Execution, OpenCode and Model Context Protocol, with Technology, Cloud & SaaS the most affected sector. The most recent story, “OpenCode RCE Flaw Weaponizes Malicious Model Context Protocol Servers via OAuth Injection”, was published 23 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
MicrosoftA critical vulnerability in OpenCode allows malicious Model Context Protocol servers to execute arbitrary shell commands on Windows and WSL hosts during OAuth.
Threat IntelF5 confirms active zero-day exploitation of CVE-2026-94127, a critical heap buffer overflow in BIG-IP APM OAuth gateways allowing unauthenticated remote code execution.