{"uuid": "cac0293d-d36c-4e6d-91fb-62a684c94e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt7snhzuc2j", "content": "CVE-2026-93868 - cotonti\nThe password reset feature in Cotonti (up to version 1.0.0) creates codes that can be guessed because they are based on the server's current time. An attacker who knows the server's clock can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cotonti #CVE #infosec", "creation_timestamp": "2026-09-18T22:30:07.364511Z"}