CVE-2026-24038

Horilla is a free and open source Human Resource Management System HRMS. In version 1.4.0, the OTP handling logic has a flawed equality check that can be bypassed. When an OTP expires, the server returns None, and if an attacker omits the otp field from their POST request, the user-supplied OTP i...

CVE-2026-24038

creationtimestamp| type| source ---|---|--- 2026-01-22 05:07:16+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mcyg3tfsul22 2026-01-22 07:07:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcymtiuief2g...