CVE-2026-102248 | Rebuild up to 4.4.7/4.5.0-beta5 Login Endpoint /user/login improper authentication (Issue 25)

September 28, 2026 Yanac

A vulnerability marked as critical has been reported in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The manipulation leads to improper authentication.

This vulnerability is traded as CVE-2026-102248. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More