CVE-2026-48902

The Joomla! CMS core contains a transport encryption downgrade vulnerability (CVE-2026-48902) affecting the password and username reset features. If the "Force SSL" flag is not explicitly enabled, these features generate plain HTTP links even when the connection is over HTTPS. This allows sensiti...

CVE-2024-41888

Missing Release of Resource after Effective Lifetime vulnerability in Apache Answer. This issue affects Apache Answer: through 1.3.5. The password reset link remains valid within its expiration period even after it has been used. This could potentially lead to the link being misused or hijacked...