CVE-2026-1670

9.8CRITICAL
发布于: 2/17/2026更新于: 2/17/2026

描述

The affected products are vulnerable to an unauthenticated API endpoint exposure, which may allow an attacker to remotely change the "forgot password" recovery email address.

AI分析AI驱动

参考资料