CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Sangfor Operation and Maintenance Security Management System Weak Password Recovery Vulnerability (CVE-2026-1325) Security Advisory
[Affected Scope] Sangfor Operation and Maintenance Security Management System up to version 3.0.12
[Impact] Unauthenticated remote attackers can bypass password reset logic, compromise administrative accounts, and gain full control over the bastion host
[Mitigation] Restrict external access to the system and block the vulnerable endpoint using web application firewalls or reverse proxy rules
GitLab CE/EE Account Takeover via Password Reset Vulnerability (CVE-2023-7028) Security Advisory
[Affected Scope] GitLab CE/EE versions 16.1 to 16.7.1 (prior to 16.1.6, 16.2.9, 16.3.7, 16.4.5, 16.5.6, 16.6.4, and 16.7.2)
[Impact] An unauthenticated remote attacker can trigger password reset emails to be sent to an arbitrary, unverified email address, leading to complete account takeover.
[Mitigation] Immediately upgrade GitLab instances to the patched versions (16.1.6, 16.2.9, 16.3.7, 16.4.5, 16.5.6, 16.6.4, 16.7.2 or later) and enforce Multi-Factor Authentication (MFA).