CVE-2026-93868

Name of the Vulnerable Software and Affected Versions Cotonti version 1.0.0

Description Password recovery validation tokens are derived from md5(microtime()) within the users.passrecover.php file, resulting in a predictable token space of approximately one million values per second. Unauthenticated attackers can utilize the server Date header to precompute candidate tokens within a narrow time window and probe them against the passrecover authentication endpoint to reset any account password, including those of administrators.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.