9.8
Critical
CVE-2024-48176 Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control
Description
Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not be refreshed after a failed login, which allows attackers to blast the username and password and log into the system backend.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| n/a | Versions not published | |
| lylme_spage | 1.9.5 | No fix stated |
Other CVEs of n/a
The 144659 CVEs of n/a →
CVE-2026-117373
Janus WebRTC Server 1.2.3 through 1.4.0 is vulnerable to Directory Traversal
Not rated
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
7.5
High
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
5.4
Medium
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
8.1
High