Is authentik 2026.5.6 affected?

CVSS 8.9

5 known vulnerabilities affect 2026.5.6 (highest CVSS 8.9).

8 newer releases in its track, up to 2026.8.5. What changed up to 2026.8.5

Vulnerabilities affecting 2026.5.6

8.9
CVE-2026-94606 MFA bypass via recipient override in the email authenticator
8.8
CVE-2026-94609 Privilege escalation via delegated group and user management
8.1
CVE-2026-94611 Certain stored credentials readable with view permission alone
7.5
CVE-2026-94613 Denial of Service via Malformed SAML Messages
7.4
CVE-2026-94612 Authentication bypass in SAML Sources via assertion confusion and replay