CVE-2026-118459:詳細資料

CVE-2026-118459

2026-11-09
12h16 +00:00
A07-Identif. and Authent. Fail
2026-11-09
12h16 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

A time-derived emergency password can be derived from publicly available application code, enabling authentication without legitimate credentials.

CVE 資訊

相關弱點

CWE-ID 弱點名稱 來源
CWE-640 Weak Password Recovery Mechanism for Forgotten Password
The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.

參考資料