CVE-2026-102603 | Gotify server up to 2.x Password Change Endpoint improper authentication

October 13, 2026 Yanac

A vulnerability has been found in Gotify server up to 2.x and classified as critical. This affects an unknown part of the component Password Change Endpoint. The manipulation leads to improper authentication.

This vulnerability is traded as CVE-2026-102603. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More