Threats Tagged 'cve-2026-40935'
View all threats tagged with 'cve-2026-40935'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-40935'
Click on any threat for detailed analysis and mitigation recommendations
0 WWBN AVideo versions 29.0 and earlier contain a vulnerability in the CAPTCHA implementation where the CAPTCHA length can be set by an unauthenticated client without validation, allowing generation of a 1-character CAPTCHA. Because the CAPTCHA comparison is case-insensitive over a limited alphabet and failed attempts do not consume the session token, an attacker can brute-force the CAPTCHA in about 33 attempts per session. This affects any endpoint relying on Captcha::validation(), such as user registration and password recovery. A fix is available in commit bf1c76989e6a9054be4f0eb009d68f0f2464b453, but no official vendor advisory or patch release is referenced. Join the discussion | CVE Database V5 | 04/21/2026, 22:21:17 UTC Added: 04/21/2026, 22:31:06 UTC |
Showing 1 to 1 of 1 result