Published threat advisories for February 7, 2026

An unauthenticated attacker can exploit a weakness in macrozheng mall's password reset workflow to take over user accounts. The vulnerability allows an attacker to reset a victim's password using only their telephone number because the one-time password is exposed and validation is insufficient. This could lead to unau

NVD modified: NVD date unavailable