CWE-620

CWE-620 · 10 records · 9 with a public proof-of-concept

Records the NVD classes under CWE-620, highest CVSS first.

  1. CRITICAL 9.8CVE-2025-714572026-11-04

    vtenext 25.02 before 25.02.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to change any account password via hub/rpwd.php without token verification. Attackers knowing a valid user_name can send action=change_password t…

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.8CVE-2026-97380public PoC2026-10-16

    MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, the GRANT PROXY statement treats an IDENTIFIED clause with an empty password as though authentication were not specified, ca…

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 8.3CVE-2026-92467public PoC2026-09-16

    zlt2000 microservices-platform through 6.0.0 contains an unverified password change vulnerability in the PUT /users/password endpoint that allows authenticated users to change any account password by omitting the current password check. Attackers can supply an…

    AI risk analysis on Exploit-DB.ai →

  4. MEDIUM 6.8CVE-2013-20008public PoC2026-10-28

    Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new p…

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 6.8CVE-2026-112002public PoC2026-10-18

    ProjectSend 2.5.0 before 2.7.0 contains an unverified password change vulnerability in PasswordController::update() that lets sessions of Social-provisioned accounts set local passwords without the current password. Attackers holding a stolen session cookie ca…

    AI risk analysis on Exploit-DB.ai →

  6. MEDIUM 6.5CVE-2026-104106public PoC2026-10-14

    FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise permits an authenticated session with a valid CSRF token to disable TOTP without recent full reauthentication or to begin enrollme…

    AI risk analysis on Exploit-DB.ai →

  7. MEDIUM 5.5CVE-2026-118984public PoC2026-10-29

    OmniRoute 3.8.0 before 3.8.52 contains an unverified password change vulnerability that allows holders of manage- or admin-scoped API keys or oma_ access tokens to change the management password without the current password. Attackers can send POST requests to…

    AI risk analysis on Exploit-DB.ai →

  8. MEDIUM 4.8CVE-2026-105785public PoC2026-10-06

    Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks. Prior to Joplin Server 3.7.2, packages/server/src/models/TokenModel.ts stores CSRF, account-confirmation, email-change, and password-reset tokens without …

    AI risk analysis on Exploit-DB.ai →

  9. MEDIUM 4.3CVE-2026-119429public PoC2026-10-30

    phpMyAdmin through 5.2.3 contains a missing re-authentication vulnerability that allows authenticated attackers to remove two-factor authentication by posting the 2fa key to /config/set. Attackers holding a hijacked session can submit key=2fa with a null JSON …

    phpmyadmin

    AI risk analysis on Exploit-DB.ai →

  10. UNSCOREDCVE-2026-102603public PoC2026-10-13

    Gotify server is a simple server for sending and receiving messages in real-time per WebSocket. Prior to 3.0.0, the password change endpoint (POST /current/user/password) accepts a valid client token without requiring the account's current password or another …

    AI risk analysis on Exploit-DB.ai →