EUVD-2026-83365

Cotonti through 1.0.0 derives password recovery validation tokens from md5microtime in users.passrecover.php, creating a predictable token space of approximately one million values per second. Unauthenticated attackers can read the server Date header, precompute candidate tokens within a narrow...

CVE-2026-93868

Cotonti through 1.0.0 uses md5(microtime()) to generate password recovery validation tokens in users.passrecover.php, yielding a predictable token space of roughly one million values per second. An unauthenticated attacker can read the server Date header, precompute candidate tokens within a narr...