CVE-2026-108335 - Password Reset Functionality Missing Brute-Force Protection
CVE ID :CVE-2026-108335 Published : Oct. 14, 2026, 10:17 p.m. | 1 hour, 15 minutes ago Description :When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack. There is no rate limiting on the attempts to...