Xiaochong0302 Course-tencent-cloud vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Xiaochong0302 Course-tencent-cloud: 1 record(s), with affected versions and fixes.

CVE-2026-111675 High · 7.4 CWE-307 Oct 16, 2026

Course-tencent-cloud through 2.0.1 Verification Code Brute Force Account Takeover

Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute force 6-digit SMS/email verification codes, which are never invalidated or attempt-limited. Attackers who know a victim's phone or email can trigger a code and rotate source IPs against the password reset and verify login endpoints to take over accounts.