Skip to content
OpenAdvisories

Vendor

gophish

8 known vulnerabilities.

Products

gophish 7 Admin Panel 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-107269

    Gophish through 0.12.1 Username Enumeration via POST /login Timing Discrepancy

    Gophish through 0.12.1 contains a timing discrepancy vulnerability in AdminServer.Login that allows unauthenticated attackers to enumerate valid usernames by measuring login response times. Attackers can submit candidate usernames to POST /login and detect bc…

    gophish gophish