CVE-2026-113710 | Apostrophe up to 4.32.x Self-Service Password-Change Endpoint excessive authentication

October 20, 2026 Yanac

A vulnerability classified as problematic was found in Apostrophe up to 4.32.x. Affected by this issue is some unknown functionality of the component Self-Service Password-Change Endpoint. The manipulation results in improper restriction of excessive authentication attempts.

This vulnerability is known as CVE-2026-113710. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More