Remote Password Reset Vulnerability in Affected Product by Vendor

CVE-2026-60046

What is CVE-2026-60046?

An unauthenticated remote attacker has the ability to initiate password resets for any user given knowledge of their username and email address, without any rate limiting enforced. This security flaw poses a significant risk as it could lead to unauthorized account access and a complete loss of account control for users affected by this vulnerability. As such, it is essential for users and administrators to implement robust security measures to mitigate the potential impacts of this vulnerability.

References