CVE-2026-101041 | vulnerability-lookup up to 6.2.0 Account Recovery website/models/user.py toctou

September 27, 2026 Yanac

A vulnerability categorized as critical has been discovered in vulnerability-lookup up to 6.2.0. This vulnerability affects unknown code of the file website/models/user.py of the component Account Recovery. Executing a manipulation can lead to time-of-check time-of-use.

This vulnerability appears as CVE-2026-101041. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More