Vulners
Lucene search
3 matches found
EUVD-2026-31878
The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...
5.8AI score0.00001EPSS
Exploits0References1
CVE-2026-48902
The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...
5.8AI score0.00001EPSS
Exploits0References2Affected Software1
[20260518] - Core - Transport encryption downgrade for password and username reset links
The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...
9.8CVSS5.8AI score0.00001EPSS
Exploits0Affected Software1
20