3 matches found
CVE-2026-48902
The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...
5.8AI score0.00252EPSS
SaveExploits0References2Affected Software1
EUVD-2026-31878
The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...
5.8AI score0.00252EPSS
SaveExploits0References1
[20260518] - Core - Transport encryption downgrade for password and username reset links
The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set...
9.8CVSS5.8AI score0.00252EPSS
SaveExploits0Affected Software1
20