Threats tagged 'ghsa-3625-cmv6-g9c2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.0	CVE-2026-118984OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or High7.02026-10-29GCVE DatabaseCVE-2026-118984 OmniRoute versions 3.8.0 up to but not including 3.8.52 have a vulnerability allowing holders of manage- or admin-scoped API keys or oma_ access tokens to change the management password without knowing the current password. This can enable attackers to lock out legitimate operators, take over dashboard login, or disable login requirements. Report on CVE-2026-118984 Vulnerability CWE-620 #ghsa-3625-cmv6-g9c2	GCVE Database	2026-10-29

Page 1 of 1