When setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.
78 vulnerabilities with CWE-620
CVE-2026-40588
HIGH
blueprintUE: Authenticated Password Change Does Not Verify Current Password
CVSS 8.1
CVE-2026-30458
CRITICAL
FuelCMS 1.5.2 - Info Disclosure
CVSS 9.1
CVE-2026-27757
HIGH
SODOLA SL902-SWTGW124AS <200.1.20 - Auth Bypass
CVSS 7.1
CVE-2026-24443
HIGH
EventSentry <6.0.1.20 - Auth Bypass
CVSS 8.8
CVE-2026-2543
LOW
vichan-devel vichan <5.1.5 - Auth Bypass
CVSS 2.7
CVE-2026-24440
HIGH
Shenzhen Tenda W30E V2 - Info Disclosure
CVSS 8.8
CVE-2025-70082
CRITICAL
Lantronix EDS3000PS 3.1.0.0R2 - Code Injection
CVSS 9.8
CVE-2025-67041
CRITICAL
Lantronix EDS3000PS 3.1.0.0R2 - Command Injection
CVSS 9.8
CVE-2025-14751
HIGH
Product - Privilege Escalation
CVE-2025-11235
LOW
Progress MOVEit Transfer <2023.1.3-2022.0.10 - Unverified Password ...
CVSS 3.7
CVE-2025-13148
HIGH
IBM Aspera Orchestrator <4.1.0 - Privilege Escalation
CVSS 8.1
CVE-2025-67719
HIGH
Ibexa <5.0.3 - Privilege Escalation
CVE-2025-59808
MEDIUM
Fortinet FortiSOAR <7.6.2 - Info Disclosure
CVSS 6.8
CVE-2025-63362
CRITICAL
Waveshare RS232/485 TO WIFI ETH (B) Serial to Ethernet/Wi-Fi Gatewa...
CVSS 9.8
CVE-2025-61132
HIGH
levlaz braindump <0.4.14 - Host Header Injection
CVSS 7.1
CVE-2025-62425
HIGH
MAS <1.4.0 - Privilege Escalation
CVSS 8.3
CVE-2025-61536
HIGH
FelixRiddle dev-jobs-handlebars 1.0 - Info Disclosure
CVSS 8.2
CVE-2025-22381
HIGH
Aggie 2.6.1 - Open Redirect
CVSS 8.2
CVE-2025-9286
CRITICAL
Appy Pie Connect <1.1.2 - Privilege Escalation
CVSS 9.8
CVE-2025-10159
CRITICAL
Sophos AP6 - Privilege Escalation
CVSS 9.8
CVE-2025-46389
MEDIUM
Product - Privilege Escalation
CVSS 6.5
CVE-2025-4606
CRITICAL
Uxper Sala - Startup & SaaS WordPress Theme <=1.1.4 - Privilege Escalation via Account Takeover
CVSS 9.8
CVE-2025-6097
MEDIUM
UTT 进取 750W <5.0 - Auth Bypass
CVSS 5.3
CVE-2025-5482
HIGH
Sunshinephotocart Sunshine Photo Cart < 3.4.12 - Privilege Escalation
CVSS 8.8
CVE-2025-47938
LOW
TYPO3 <9.5.51 ELTS, 10.4.50 ELTS, 11.5.44 ELTS, 12.4.31 LTS, 13.4.1...
CVSS 3.8
Details
Vulnerabilities
78