CVE-2025-56676

TitanSystems Zender v3.9.7 contains an account takeover vulnerability within its password reset functionality. The root cause is the improper validation of token-user linkage , where a temporary password or reset token issued to one user is not correctly bound to the requesting account. This allo...