Ddsn Cm3 Acora Cms vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ddsn Cm3 Acora Cms: 1 record(s), with affected versions and fixes.
cpe:2.3:a:ddsn:cm3_acora_cms

CVE-2025-63314 Critical · 10.0 CWE-640 Jan 12, 2026

Weak Password Recovery Mechanism in Ddsn Cm3 Acora Cms

A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset the user password and execute a full account takeover via a replay attack.