Ddsn vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ddsn products: 1 record(s), with severity, exploitation and fixes.

Cm3 Acora Cms 1

Exploited only (KEV) →

CVE-2025-63314 Critical · 10.0 CWE-640 Jan 12, 2026

Weak Password Recovery Mechanism in Ddsn Cm3 Acora Cms

A static password reset token in the password reset function of DDSN Interactive Acora CMS v10.7.1 allows attackers to arbitrarily reset the user password and execute a full account takeover via a replay attack.