MediumEarly warningVulnerability exploitationEnglish

Budibase OIDC/SSO Auth Bypass Lets Attacker Claim Admin Invite — CVE-2026-100684

First seen 17 Oct, 02:41 WIBLatest 17 Oct1 articles · 1 publishers

Confidence index · preliminarycomputed by the pipeline (V0.7)low

Corroborated by distinct domains

Independent sources

Victim identified

Full text available

Clustering consistency

Status and preventive steps

Early warningMachine output from news coverage; not verified by the public or institutions

Preventive steps

Literacy audienceIT staff and system administrators

Literacy topics

Extracted claims

Victimnot found

not identified

Actornot found

not identified

Attack typeconfidence 0.90

Vulnerability exploitation

Event datenot found

not identified

Locationnot identified

Target groupnot identified

Status

Conclusion

1 articles, by publication time

Relations between articlesSingle source; no article pairs to compare.

Hashes prepared1full text hashed 0

first evidence_uid2cd3f46d9658a3eb0a86564c

1 of 1 evidence records are in Merkle batches

each flow's preventive output; this is where they differ · D1 changed 1 times · since 17 Oct

	D1Machine17 Oct	D2Public surveynone yetHelp review	D3Institutionnone yet	D4Official recordnone yet
Literacy audience	IT staff and system administrators	–	–	–
Literacy topics	1.System updates and security patches 2.Backups and recovery after ransomware 3.How to report and keep evidence	–	–	–
Preventive steps	Apply security updates quickly, prioritising flaws that are being exploited. Limit services exposed to the internet and follow vendor advisories. Report to Patroli Siber Polri	–	–	–
Institution's reason	–	–	–	–

Columns D2 to D4 fill in once the public survey and institution statements are running.Summary across incidents