Severity:
CRITICAL RISK
(9.1)
Missing MFA Enforcement (CWE-308) in Logto SSO Flows
CVE-2026-15616
Deferred
Summary
Affected Context
Exploit Preconditions
Why This Happens
Potential Impact
General Mitigation Guidance
How Teams Detect Issues Like This
Frequently Asked Questions
Source
NDV
[GET STARTED]
START PENTEST
NO CC REQUIRED
