CVE-2026-109394 | Thirty bees up to 1.7.0 PasswordController resolveCustomer improper authentication

October 12, 2026 Yanac

A vulnerability described as critical has been identified in Thirty bees up to 1.7.0. This affects the function PasswordController::resolveCustomer of the component PasswordController. Executing a manipulation can lead to improper authentication.

The identification of this vulnerability is CVE-2026-109394. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More