Vulnerabilities

CVE-2026-21622 - Password Reset Tokens Do Not Expire

2026-03-05 0 views admin

CVE ID : CVE-2026-21622 Published : March 5, 2026, 9:18 p.m. | 25 minutes ago Description : Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Accounts.PasswordReset' module) allows Account Takeover. Password reset tokens generated via the

CVE Details

CVE ID

CVE-2026-21622

Published

March 5, 2026

🏷️ Tags

cvevulnerabilitysecuritycybersecuritycve-2026-21622

CVE-2026-21622 - Password Reset Tokens Do Not Expire

CVE Details

🏷️ Tags

More from Vulnerabilities

CVE-2026-28348 - lxml_html_clean: CSS @import Filter Bypass via Unicode Escapes

CVE-2026-28343 - CKEditor: Cross-site scripting (XSS) in the HTML Support package

CVE-2025-70995 - Aranda Service Desk Web Edition Remote Code Execution Vulnerability

CVE-2025-70949 - Couch-Auth Timing Side-Channel Information Disclosure

Trending

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

CVE-2025-43939: Dell Unity OS Command Injection (High)

Google disputes false claims of massive Gmail data breach

Microsoft: DNS outage impacts Azure and Microsoft 365 services

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting