CVE-2026-6266General

LOWCVSS 8.3 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (IDP) identity to an existing AAP user account based on email matching without verifying email ownership. This allows a remote attacker to potentially hijack a victim's account or gain unauthorized access to other accounts, including administrative accounts, by manipulating the IDP-provided email.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-305

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

3 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 2 classified signals
Disclosure: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification2 categories

General

266.7%

Disclosure

133.3%

Referenced assets3 URLs

By indicator

Full discourse3 posts

Infoflowcloud@infoflowcloud158d
General
🚨*CVE* CVE-2026-6266 A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (IDP) identity to an existing… https://www.cve.org/CVERecord?id=CVE-2026-6266 ----- Traducción: Se encontró una f… http://infoflow.cloud`
Post summary
The post announces CVE‑2026‑6266 affecting the AAP gateway’s user auto‑link strategy but supplies no technical details, exploit info, or mitigation advice.
0000030
75 followersView on X
CVE@CVEnew158d
General
CVE-2026-6266 A flaw was found in the AAP gateway. The user auto-link strategy, introduced in AAP 2.6, automatically links an external Identity Provider (IDP) identity to an existing… https://www.cve.org/CVERecord?id=CVE-2026-6266
Post summary
A brief notice of a flaw in Ansible Automation Platform’s gateway auto‑link strategy, with no technical details, PoC, or mitigation information provided.
00000140
57.4K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds158d
Disclosure
CVE-2026-6266 Account Hijacking via Unverified Email Matching in Ansible Automation Platform Gateway 2.6 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6266
Post summary
The text announces CVE-2026-6266, describing an account hijacking flaw in Ansible Automation Platform Gateway 2.6 caused by unverified email matching. No exploitation code, patches, or active use reports are provided.
0000055
4.0K followersView on X

Explore more

Back to dashboard