Threats tagged 'ghsa-2r64-8hvp-8498'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.1	CVE-2026-63159Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows Critical9.12026-10-13GCVE DatabaseCVE-2026-63159 Omnispace Agora Project versions before 26.10.0 have a vulnerability where the password-reset token is generated in a predictable manner using sha1(login.password). This allows unauthenticated attackers to compute or brute-force valid reset tokens from known or guessed login credentials, enabling account takeover. Report on CVE-2026-63159 Vulnerability CWE-640 #ghsa-2r64-8hvp-8498	GCVE Database	2026-10-13

Page 1 of 1