CVE-2026-56294Disclosure

LOWCVSS 4.3 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSucceeded() method fails to validate CryptoObject parameters. Attackers can hook the onAuthenticationSucceeded() function using dynamic instrumentation to bypass biometric authentication without valid credentials.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-287

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 3 signals
Disclosure: 2 classified signals
General: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

Disclosure

266.7%

General

133.3%

Referenced assets4 URLs

By indicator

Full discourse3 posts

Vulmon Vulnerability Feed@VulmonFeeds137d
General
CVE-2026-56294 Authentication Bypass in Capacitor Native Biometric Befor... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-56294 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The tweet references CVE‑2026‑56294 as an authentication bypass in Capacitor Native Biometric, but offers only a vague link to a Vulmon page and provides no further detailed information or evidence of exploitation.
0000037
4.1K followersView on X
Infoflowcloud@infoflowcloud137d
Disclosure
🚨*CVE* CVE-2026-56294 capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSucceeded() method fails to validate CryptoObject… https://www.cve.org/CVERecord?id=CVE-2026-56294 ----- Traducción: CVE-2026-56294 cap… http://infoflow.cloud`
Post summary
The tweet announces a CVE (CVE-2026-56294) describing an authentication bypass in capacitor-native-biometric versions prior to 12.128.2, where CryptoObject validation is omitted.
0000024
88 followersView on X
CVE@CVEnew137d
Disclosure
CVE-2026-56294 capacitor-native-biometric before 12.128.2 contains an authentication bypass vulnerability where the onAuthenticationSucceeded() method fails to validate CryptoObject… https://www.cve.org/CVERecord?id=CVE-2026-56294
Post summary
The tweet alerts that capacitor-native-biometric versions prior to 12.128.2 contain an authentication‑bypass flaw stemming from improper CryptoObject validation.
00000270
57.7K followersView on X

Explore more

Back to dashboard