https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:52:11 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-84801 <p>Craft CMS versions before 5.10.11 fail to validate admin status in the actionGetPasswordResetUrl endpoint, allowing non-admin users with administrateUsers permission to mint password reset URLs for administrator accounts. Attackers can generate a valid reset URL for any admin user and set a new password via actionSetPassword, which validates only the verification code without checking the caller&#39;s session, enabling complete control-panel takeover.</p> <p>Craft CMS versions before 5.10.11 fail to validate admin status in the actionGetPasswordResetUrl endpoint, allowing non-admin users with administrateUsers permission to mint password reset URLs for administrator accounts. Attackers can generate a valid reset URL for any admin user and set a new password via actionSetPassword, which validates only the verification code without checking the caller&#39;s session, enabling complete control-panel takeover.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-84801 https://vulnerability.circl.lu/vuln/ghsa-jqj3-2x8f-877r <p>Craft CMS versions before 5.10.11 fail to validate admin status in the actionGetPasswordResetUrl endpoint, allowing non-admin users with administrateUsers permission to mint password reset URLs for administrator accounts. Attackers can generate a valid reset URL for any admin user and set a new password via actionSetPassword, which validates only the verification code without checking the caller&#39;s session, enabling complete control-panel takeover.</p> <p>Craft CMS versions before 5.10.11 fail to validate admin status in the actionGetPasswordResetUrl endpoint, allowing non-admin users with administrateUsers permission to mint password reset URLs for administrator accounts. Attackers can generate a valid reset URL for any admin user and set a new password via actionSetPassword, which validates only the verification code without checking the caller&#39;s session, enabling complete control-panel takeover.</p> https://vulnerability.circl.lu/vuln/ghsa-jqj3-2x8f-877r