Threats tagged 'ghsa-h2mg-h5vq-xqx3'

1 threat

Threats tagged 'ghsa-h2mg-h5vq-xqx3'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.4%	CVE-2026-111675course-tencent-cloud · Improper Restriction of Excessive Authentication Attempts Critical9.1EPSS 0.4%2026-10-16CVE Database V5CVE-2026-111675 course-tencent-cloud versions up to 2.0.1 have a vulnerability that allows unauthenticated attackers to brute force 6-digit SMS/email verification codes. These codes are not invalidated or limited in attempts, enabling attackers who know a victim's phone or email to repeatedly try codes via password reset and verify login endpoints, potentially leading to account takeover. EPSS 0.4%Vulnerability xiaochong0302 #ghsa-h2mg-h5vq-xqx3	CVE Database V5	2026-10-16

Showing 1–1 of 1 result