CVE ID :CVE-2025-71457 Published : Nov. 4, 2026, 8:36 p.m. | 29 minutes ago Description :vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to change any account password via hub/rpwd.php without token verification. Attackers...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2025-71457 - vtenext 25.02 before 25.02.1 Unverified Password Change via hub/rpwd.php

VERWANDTEARTIKEL

Two Barracuda ESG Flaws Could Be Combined for Full Root Access; Patches Released

CVE-2026-122224 - WebVirtCloud through commit bb920b0 Missing Authorization in REST API Migrate and Create Endpoints

CVE-2026-122134 - Mistral Vibe before 2.25.7 Code Execution via Git Filter Drivers

CVE-2026-122135 - Mistral Vibe before 3.0.3 RCE via Repository-Configured gpg.program

CVE-2026-122133 - Mistral Vibe before 2.25.5 on Windows Untrusted Search Path RCE via git.exe

CVE-2026-122130 - CESNET ipfixcol2 2.3.0 before 2.9.0 Buffer Overflow via Forwarder Output Plugin