Executive brief
Known affected by Account Takeover via Password Reset Token Leakage
Affected products
- Packagist idno/known
Junglewise Threat Intelligence
CVE-2026-26273: Known affected by Account Takeover via Password Reset Token Leakage
CVE-2026-26273 · Severity: low · CVSS 3 · Published 2026-02-13
Technologies: idno/known (Packagist). Vendors: Packagist.
Related threats
- Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
- Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint
- Known vulnerable to code execution via SVG file in v1.3.1
- Known v1.3.1 Cross-site Scripting
- Known vulnerable to account takeover via host header injection attack in v1.3.1