Skip to content
OpenAdvisories

Vendor

databasus

1 known vulnerabilities.

Products

databasus 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-110770

    Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-Force

    Databasus 3.7.0 through 3.61.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to brute-force password reset codes via POST /api/v1/users/reset-password. Attackers can request a six-digit code for a known email, then gues…

    databasus databasus