CVE-2026-86808

moltis-org moltis (versions up to 20260818.10) contains a missing authentication vulnerability in the vault_unlock_handler/vault_recovery_handler function of vault.rs. A remote attacker with no privileges or user interaction can exploit this to achieve low impact on confidentiality, integrity, an...

PT-2026-88320

A security vulnerability has been detected in moltis-org moltis up to 20260818.10. The affected element is the function vault unlock handler/vault recovery handler of the file vault.rs. Such manipulation leads to missing authentication. The attack can be launched remotely. The exploit has been...