https://poc.intelseclab.com/tags/account-pre-hijacking/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44166-pocketbase-oauth2-account-prehijack/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44166-pocketbase-oauth2-account-prehijack/Medium severity (CVSS 6.1) — web · CVE-2026-44166 / [GHSA-pq7p-mc74-g65w](https://github.com/pocketbase/pocketbase/security/advisories/GHSA-pq7p-mc74-g65w). Status: PoC. Affects: [PocketBase](https://github.com/pocketbase/pocketbase) (Go backend / BaaS). Tags: pocketbase, oauth2, account-takeover, account-pre-hijacking, cwe-287, improper-authentication, go.webMediumpocketbaseoauth2account-takeoveraccount-pre-hijackingcwe-287improper-authenticationgo