{"vulnerability": "CVE-2026-93868", "sightings": [{"uuid": "c25f7044-c405-4c43-9e6c-195a78450d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvt2v5jjpb2r", "content": "\ud83d\udfe0 CVE-2026-93868 - High (8.1)\n\nCotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users....\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93868/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T21:02:03.482356Z"}, {"uuid": "ae6d4878-cec2-4bab-b99d-6907e140cb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/gntdxhbaxnqn5", "content": "CVE-2026-93868 - Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNG\nCVE ID : CVE-2026-93868\n \n Published : Sept. 18, 2026, 8:17 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : Cotonti through 1.0.0 derives password recovery validation tokens from md5(microti...", "creation_timestamp": "2026-09-18T22:04:31.680832Z"}, {"uuid": "a2c876b3-a622-45bc-a6f5-8d2cf102cf1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvt6pssb6j2g", "content": "\ud83d\udea8 CVE-2026-93868 \u2014 CVSS 9.2 CRITICAL\n\nCotonti through 1.0.0 derives password recovery validation tokens from md5(microtime()) in users.passrecove...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93868\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T22:10:38.027172Z"}, {"uuid": "cac0293d-d36c-4e6d-91fb-62a684c94e3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93868", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvt7snhzuc2j", "content": "CVE-2026-93868 - cotonti\nThe password reset feature in Cotonti (up to version 1.0.0) creates codes that can be guessed because they are based on the server's current time. An attacker who knows the server's clock can\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#cotonti #CVE #infosec", "creation_timestamp": "2026-09-18T22:30:07.364511Z"}]}