Ascertia SigningHub versions through 8.6.8 have a vulnerability due to lack of rate limiting on the password reset function. This flaw allows an authenticated attacker to automate reset password requests, resulting in an email bombing attack. The vulnerability has a critical severity rating with a CVSS score of 9.8.