Threat database

CVE-2026-110373 is an Incorrect Privilege Assignment vulnerability in the Hamid Alinia Login with phone number product. It allows privilege escalation, affecting versions from initial releases up to 1.8.77. The vulnerability has a high severity with a CVSS score of 8.1.

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login with phone number: from n/a through 1.8.77.

CVE-2026-65570 is an authentication bypass vulnerability affecting the 'Login with phone number' product by Hamid Alinia in versions up to and including 1.8.70. This vulnerability allows unauthenticated attackers to bypass authentication mechanisms by spoofing, potentially leading to full compromise of confidentiality, integrity, and availability. The vulnerability is classified under CWE-290 (Authentication Bypass by Spoofing) and has a high severity with a CVSS score of 8.1. No official patch or remediation guidance has been provided yet.

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.6.93.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.7.35.

Incorrect Privilege Assignment vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.7.16.

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.7.18.

Cross-Site Request Forgery (CSRF) vulnerability in Hamid Alinia Login with phone number login-with-phone-number.This issue affects Login with phone number: from n/a through <= 1.6.93.