CVE-2026-115770 | Pocket ID up to 2.11.x Token Model email_verification_token.go SendEmailVerification/UpdateUser/VerifyEmail improper authentication

November 5, 2026 Yanac

A vulnerability has been found in Pocket ID up to 2.11.x and classified as critical. Affected is the function SendEmailVerification/UpdateUser/VerifyEmail of the file backend/internal/model/email_verification_token.go of the component Token Model. This manipulation causes improper authentication.

This vulnerability is tracked as CVE-2026-115770. The attack is possible to be carried out remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More