CVE-2026-107640 | Integrics Enswitch up to 4.4 update reset improper authentication

October 8, 2026 Yanac

A vulnerability was found in Integrics Enswitch up to 4.4. It has been rated as critical. The affected element is an unknown function of the file /api/json/user/password/update/. Performing a manipulation of the argument reset results in improper authentication.

This vulnerability was named CVE-2026-107640. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More