CVE-2026-4773Disclosure

LOWCVSS 8.1 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Improper validation of specified type of input vulnerability in Magarsus Consulting Ltd. Co. IDM-MFA allows Authentication Bypass. This issue affects IDM-MFA: from 2025.11.27 before 2026.03.10.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-1287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-07-22: 2Patch / Workaround · 2026-07-22: 1Technical Details · 2026-07-22: 207-22
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • ADK Cyber@ADKCyber
    Disclosure

    CVE-2026-4773 (CVSS 8.1) allows authentication bypass in Magarsus IDM-MFA. Review exposure if using affected versions. https://nvd.nist.gov/vuln/detail/CVE-2026-4773 http://adkcyber.com via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning https://t.co/Pwhda0VwEV

    Post summary

    The tweet announces CVE-2026-4773, an authentication bypass vulnerability in Magarsus IDM-MFA with a CVSS score of 8.1, and urges viewers to review exposure, but provides no PoC, exploit, or patch details.

    0000098
    89 followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨High - Magarsus IDM-MFA Authentication Bypass (CVE-2026-4773) Magarsus Consulting IDM-MFA contains an improper input-type validation flaw (CWE-1287) that allows an authentication bypass. A remote attacker can bypass the product's authentication controls, undermining the multi-factor protection the product is meant to provide, with high confidentiality and integrity impact. CVSS 8.1. The issue was reported by TR-CERT (Computer Emergency Response Team of the Republic of Turkey). Exploitation requires user interaction, and no public PoC is currently available. 👉Affected: IDM-MFA from 2025.11.27 before 2026.03.10. Upgrade to 2026.03.10.

    Post summary

    CVE-2026-4773 is a high‑severity authentication bypass in Magarsus IDM‑MFA caused by improper input validation (CWE‑1287). No PoC or active exploitation is reported, but a patch (upgrade to 2026.03.10) is available.

    00000110
    254 followersView on X

Explore more