CVE-2026-94105 | NivoCart up to 2.4.0 Password Reset Controller code password recovery

September 20, 2026 Yanac

A vulnerability was found in NivoCart up to 2.4.0. It has been declared as critical. This affects an unknown part of the component Password Reset Controller. The manipulation of the argument code results in weak password recovery.

This vulnerability is identified as CVE-2026-94105. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More