Do Son A serious Instagram account recovery flaw has been exposed. Read this Meta incident notification detailing how AI-assisted bugs bypass security.
password reset
Payload CMS fixes a critical 9.1 CVSS flaw (CVE-2026-34751) in its password reset flow. Attackers could hijack accounts. Update to v3.79.1 immediately!
A Critical (CVSS 9.8) Auth Bypass flaw (CVE-2025-63207) in R.V.R Elettronica TEX broadcast hardware allows unauthenticated attackers to reset all user passwords (Admin/Operator) via a simple HTTP request.
A critical flaw (CVE-2025-58434) in FlowiseAI allows unauthenticated attackers to hijack any account. The bug has a CVSS 9.8 score, and a PoC has been released.
Plex has confirmed a data breach that exposed user data, including hashed passwords. All users are being urged to reset their passwords as a security precaution.
Synacktiv unveils chained flaws in ScriptCase's prod console (CVE-2025-47227/47228) allowing pre-authenticated RCE via password reset & shell injection, risking web servers.
A ZITADEL vulnerability allows host header injection to hijack user accounts via password reset links. Update to 3.2.2+ or configure proxy.