VDB
CVE-2026-32879
CVE-2026-32879
PUBLISHED
CVSS 4.900000095367432 MEDIUM
New API has passkey-based secure step-up verification bypass for root-only channel secret disclosure
EPSS 0.04% · 13.7th percentile
Risk Scores
CVSS 3.1
4.900000095367432
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS Score
0.04%
13.7th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| newapi | new_api | 0.10.0, 0.11.9, 0.10.0 |
| QuantumNous | new-api | >= 0.10.0, <= 0.11.9-alpha.1, *, * |
| github.com | QuantumNous/new-api | 0.10.0, 0.10.0, 0.10.0 |
Exploit Intelligence
- CIRCL seen: CVE-2026-32879 (circl-sighting)
- CIRCL seen: CVE-2026-32879 (circl-sighting)
- https://github.com/QuantumNous/new-api/security/advisories/GHSA-5353-f8fq-65vc (circl)
- CVE-2026-32879.yaml (github-poc)
- CVE-2026-32879.yaml (github-poc)
- CVE-2026-32879.yaml (github-poc)
- CVE-2026-32879.yaml (github-poc)
- CVE-2026-32879.yaml (github-poc)
- CVE-2026-32879.yaml (github-poc)
Timeline
- Mar 23, 2026 CVE Published
- Mar 23, 2026 PoC Published
- Mar 23, 2026 PoC Published
- Mar 23, 2026 Security Advisory
- Mar 24, 2026 EPSS Score
- Mar 25, 2026 EPSS Score
- Mar 25, 2026 Coalition ESS Score
- Mar 30, 2026 CVE Updated
- May 18, 2026 EPSS Score
- May 19, 2026 EPSS Score
- May 20, 2026 EPSS Score
- May 21, 2026 EPSS Score