CVE-2026-61458 - PasswordPusher < 2.9.2 Passphrase Brute-Force via Unthrottled Endpoint
CVE ID :CVE-2026-61458 Published : July 13, 2026, 10:16 p.m. | 16 minutes ago Description :PasswordPusher before 2.9.2 contains a brute-force vulnerability in the POST /p/:token/access endpoint that lacks route-specific rate limiting and per-push lockout mechanisms. Attackers who know a push...