Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.1	EPSS 0.4%	CVE-2026-53997Portal del Hermano (portaldelhermano.es) · Weak Password Recovery Mechanism for Forgotten Password Critical9.1EPSS 0.4%2026-10-12CVE Database V5CVE-2026-53997 NetHerman Portal del Hermano (portaldelhermano.es) before 2026-10-06 has a critical broken authentication vulnerability in its password recovery mechanism. The flaw exists in the POST /password/create-access and POST /password/email endpoints, where lack of rate limiting and distinct error messages allow attackers to confirm identity factors and reset passwords for any member account. This enables full account takeover, exposing profile data, full IBAN, and fiscal documents. EPSS 0.4%Vulnerability NetHerman	CVE Database V5	2026-10-12

Showing 1–1 of 1 result