PoC Archive PoC Archive

tag

Improper-Authentication

Medium
PocketBase OAuth2 Account Pre-Hijacking (CVE-2026-44166)
CVE-2026-44166 / [GHSA-pq7p-mc74-g65w](https://github.com/pocketbase/pocketbase/security/advisories/GHSA-pq7p-mc74-g65w)· [PocketBase](https://github.com/pocketbase/pocketbase) (Go backend / BaaS) unpatched