Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: The endpoint is public on purpose and the invitation code is the credential. This is the standalone SDK onboarding path for mobile apps that have no backend of their own: a developer generates a code via the authenticated dashboard endpoint, the user types it into the app, and it's redeemed for SDK-scoped tokens.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-08-23 | 2 | Disclosure1General1 |
| 2026-08-24 | 1 | General1 |
CVE-2026-78154 Missing Authentication in the-momentum open-wearables Public Invitation-Code Redemption Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-78154
Post summary
The entry simply lists CVE-2026-78154 as a missing authentication issue with a link to more information, but provides no further detail.
CVE-2026-78154 A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_code of the file backend/app/api/routes/v1/user… https://www.cve.org/CVERecord?id=CVE-2026-78154
Post summary
The post cites CVE-2026-78154 and points to the official CVE entry but provides no PoC, exploit, active use, patch, or detailed technical information.
🚨*CVE* CVE-2026-78154 A vulnerability was identified in the-momentum open-wearables up to 0.6.2. This impacts the function redeem_invitation_code of the file backend/app/api/routes/v1/user… https://www.cve.org/CVERecord?id=CVE-2026-78154 ----- Traducción: CVE-2026-78154 Se … http://infoflow.cloud`
Post summary
CVE‑2026‑78154 is a newly disclosed vulnerability in the‑momentum open‑wearables that affects the redeem_invitation_code function; no exploitation or patch details are provided.