CVE-2025-12866 - Hundred Plus｜EIP Plus - Weak Password Recovery Mechanism

CVE ID : CVE-2025-12866 Published : Nov. 10, 2025, 3:15 a.m. | 1 hour, 48 minutes ago Description : EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the 'forgot password' link, thereby successfully resetting any user's password. Severity: 9.8 | CRITICAL Visit the link for more details, such as CVSS details, affected products, timeline, and more...