CVE ID :CVE-2026-110770 Published : Oct. 14, 2026, 7:17 p.m. | 15 minutes ago Description :Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to brute-force password reset codes via POST /api/v1/users/reset-password. Attackers...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-110770 - Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force

VERWANDTEARTIKEL

CVE-2026-85714 - Stirling-PDF: Remote Code Execution via H2

CVE-2026-63626 - Mongoose: ppp_handle_ipv6cp() uses attacker-controlled length without bounds check — OOB read and heap overflow (PPP/PPPoE, MG_ENABLE_IPV6)

CVE-2026-54525 - Markdown Preview Enhanced: One Click RCE via Markdown Link Command Injection on Windows

CVE-2026-55786 - Flyto2 Core: Unauthenticated Command Execution via HTTP MCP `execute_module`

CVE-2026-110765 - FlexPrice through 2.1.38 QuickBooks Webhook Signature Verification Bypass

CVE-2026-110767 - Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob Ingestion