CVE-2025-50433

A critical authentication vulnerability exists in the Monnit Cloud platforms (specifically *.imonnit.com), allowing for complete account takeover (ATO) without victim interaction. The root cause is that the backend fails to validate the association between the password reset token and the target ...