CVE-2026-122049 | Campcodes Bitcoin Wallet System 1.0 ForgotPasswordController.php random_int excessive authentication

November 4, 2026 Yanac

A vulnerability identified as problematic has been detected in Campcodes Bitcoin Wallet System 1.0. This affects the function random_int of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts.

This vulnerability is registered as CVE-2026-122049. Remote exploitation of the attack is possible. Furthermore, an exploit is available.VulDB Recent EntriesRead More