CVE-2026-1670

9.8CRITICAL
게시됨: 2/17/2026업데이트됨: 2/17/2026

설명

The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the "forgot password" recovery email address.

AI 분석AI 기반

참조