CVE-2026-120447

HotGo through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose the SMS login verification code by supplying the Code field to /admin/sms/send. Attackers who know a user's mobile number can set a known code and sign in through...

CVE-2026-120447

The software HotGo through 2.15.1 is susceptible to an authentication bypass vulnerability. An unauthenticated attacker who knows a user's mobile number can supply a custom value to the Code field at the /admin/sms/send endpoint. By pre-setting a known verification code, the attacker can then sig...

EUVD-2026-115207

HotGo through 2.15.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to choose the SMS login verification code by supplying the Code field to /admin/sms/send. Attackers who know a user's mobile number can set a known code and sign in through...