Vulnerabilities in OpenAEV-Platform

2 results
CVE-2026-24467CRITICALOpenAEV's Improper Password Reset Token Management Leads to Unauthenticated Account Takeover and Platform CompromiseEPSS 0.9%CVE-2026-24468MEDIUMOpenAEV Vulnerable to Username/Email Enumeration Through Differential HTTP Responses in Password Reset APIEPSS 0.3%