CVE-2026-109394 - Thirty bees through 1.7.0 Account Takeover via PasswordController Guest Checkout
CVE ID :CVE-2026-109394 Published : Oct. 12, 2026, 3:16 p.m. | 15 minutes ago Description :Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::resolveCustomer() that allows unauthenticated attackers to reset registered customers' passwords using...