Beveiligingsadvies

CVE-2026-90562

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-13 10:45:36

Laatst bijgewerkt 2026-09-13 10:45:36

Toegewezen door VulnCheck

CVSS-score 9.2

Status PUBLISHED

Beschrijving

LangBot before 4.10.11 generates password recovery keys with only 24 bits of entropy and applies no rate limiting to the unauthenticated reset-password endpoint. Remote attackers knowing the administrator email can exhaust the keyspace through concurrent requests to reset the admin password and gain account access.

← Alle CVE's bekijken Bekijk op cve.org ↗