CVE-2026-60046

An unauthenticated remote attacker can perform password resets for any user with known username and email without rate limiting.

An unauthenticated remote attacker can perform password resets for any user with known username and email without rate limiting. This can result in a total loss of availabilit since the password will be reseted.

10. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-60046