Xiaochong0302 vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Xiaochong0302 products: 1 record(s), with severity, exploitation and fixes.

Course-tencent-cloud 1

Exploited only (KEV) →

CVE-2026-111675 High · 7.4 CWE-307 Oct 16, 2026

Course-tencent-cloud through 2.0.1 Verification Code Brute Force Account Takeover

Course-tencent-cloud through 2.0.1 contains an improper restriction of authentication attempts vulnerability that allows unauthenticated attackers to brute force 6-digit SMS/email verification codes, which are never invalidated or attempt-limited. Attackers who know a victim's phone or email can trigger a code and rotate source IPs against the password reset and verify login endpoints to take over accounts.