CVE-2026-19965— automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy
Possible ATT&CK Techniques 1AI
T1098 · Account ManipulationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-19965
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was determined in automad up to 2.0.0-beta.32. This vulnerability affects the function requestPasswordResetToken of the file automad/src/server/Controllers/API/UserController.php of the component Password Reset Endpoint. This manipulation of the argument name-or-email causes observable response discrepancy. The attack can be initiated remotely. The attack's complexity is rated as high. It is stated that the exploitability is difficult. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.0.0-beta.33 is able to resolve this issue. Patch name: eac0b05dafdb0ddf8b9139dad8929aaba86568ca. You should upgrade the affected component.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
响应差异性信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | automad | 2.0.0-beta.0 | cpe:2.3:a:automad:automad:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-19965
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19965
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-19965 (1)
Vendor Pages for CVE-2026-19965 (1)
Other References for CVE-2026-19965 (1)
IV. Related Vulnerabilities
Same product: automad
- CVE-2026-45332
Automad Broken Access Control: unauthenticated exposure of a - CVE-2023-7038
automad User Creation cross-site request forgery - CVE-2023-7037
automad FileController.php import server-side request forger - CVE-2023-7036
automad Content Type FileCollectionController.php upload unr - CVE-2023-7035
automad Setting post.php cross site scripting
Same vendor: n/a
- CVE-2026-19955
TrailDB TOC Validation tdb.c tdb_open out-of-bounds - CVE-2026-19930
Dolibarr User Cloning card.php ldap injection - CVE-2026-19929
OpenBoxes Template Processing DocumentController.groovy buil - CVE-2026-19928
OpenBoxes Role Interceptor RoleInterceptor.groovy needManage - CVE-2026-19927
OpenBoxes Product Upload Endpoint ProductController.groovy u
Same weakness: CWE-204
- CVE-2026-14672
PostgreSQL observable response discrepancy with non-default - CVE-2026-73306
Budibase: Account Enumeration via Login Lockout Response Dif - CVE-2026-72588
bluewave-labs Checkmate - User Enumeration via Differential - CVE-2026-55998
Cluster Existence Oracle via Unauthenticated Import Endpoint - CVE-2026-60007
Eclipse Milo 信息泄露漏洞
V. Comments for CVE-2026-19965
No comments yet