CVE Catalog
CVE-2026-66376
MediumCVSS 4.2Summary
Credentials for a deleted user may remain valid for a short period under specific conditions.
Risk Assessment
Risk of unauthorized access to the system after user account deletion, potentially leading to security breaches.
Recommendation
Immediately invalidate all sessions and credentials upon user deletion and monitor activity of deleted accounts.
Original NVD description (English source)
Credentials for a deleted user may remain valid for a short period under specific conditions.