Known Vulnerabilities for Password Reset Server by Thycotic
Listed below are 1 of the newest known vulnerabilities associated with "Password Reset Server" by "Thycotic".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-63095 json | Dendrite through 0.13.8 contains an improper authorization vulnerability in the Matrix Client-Server API that allows any auth... | Not Provided | 2026-07-17 | 2026-07-17 |
| CVE-2026-61451 json | The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-supplied admin_base_url field i... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-55207 json | Pimcore is an Open Source Data & Experience Management Platform. Prior to 2025.4.6 and 2026.1.6, an unauthenticated attacker ... | Not Provided | 2026-07-09 | 2026-07-10 |
| CVE-2026-47376 json | NocoDB is software for building databases as spreadsheets. Prior to 2026.04.1, the password-reset page rendered the URL token... | Not Provided | 2026-06-23 | 2026-06-24 |
| CVE-2026-44679 json | Tuist is a virtual platform team for Swift app devs. Prior to 1.180.10, the forgot password flow allows an unauthenticated at... | Not Provided | 2026-05-14 | 2026-05-14 |
| CVE-2026-43911 json | Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.35.5, refresh tokens are not invalidated when the us... | Not Provided | 2026-05-11 | 2026-05-12 |
| CVE-2026-42606 json | AzuraCast is a self-hosted, all-in-one web radio management suite. Prior to version 0.23.6, the ApplyXForwarded middleware un... | Not Provided | 2026-05-09 | 2026-05-12 |
| CVE-2026-41931 json | Vvveb before version 1.0.8.2 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain... | Not Provided | 2026-05-06 | 2026-05-06 |
| CVE-2026-40934 json | Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, the secret used to sign authentic... | Not Provided | 2026-05-05 | 2026-05-07 |
| CVE-2026-15155 json | The Essential Addons for Elementor – Popular Elementor Templates & Widgets plugin for WordPress is vulnerable to Authentica... | Not Provided | 2026-07-11 | 2026-07-15 |