CVE-2025-56676

TitanSystems Zender v3.9.7 is vulnerable to an account takeover vulnerability within its password reset functionality. The root cause is the improper validation of token-user linkage , where a reset token or temporary password issued to one user is not correctly bound to their specific account. C...