#

pre-hijacking

Here is 1 public repository matching this topic...

Alardiians / pocketbase-CVE-2026-44166

Lab + writeup for CVE-2026-44166: PocketBase OAuth2 account pre-hijacking via unvalidated createData.email

golang oauth2 exploit poc bug-bounty vulnerability cve access-control authentication-bypass account-hijacking account-takeover security-research pocketbase cve-2026-44166 pre-hijacking

Updated Jun 11, 2026
Python

Improve this page

Add a description, image, and links to the pre-hijacking topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the pre-hijacking topic, visit your repo's landing page and select "manage topics."