A vulnerability was found in ci4-cms-erp ci4ms and classified as problematic. Affected is an unknown function of the component Password Reset Handler. Such manipulation leads to observable response discrepancy.
This vulnerability is uniquely identified as CVE-2026-25509. The attack can be launched remotely. No exploit exists.
It is suggested to upgrade the affected component.
Intelligence View
⚡ tsecurity.de Intelligence
CVE-2026-25509 | ci4-cms-erp ci4ms prior 0.28.5.0 Password Reset response discrepancy (GHSA-654x-9q7r-g966 / EUVD-2026-5163)
A vulnerability was found in ci4-cms-erp ci4ms and classified as problematic. Affected is an unknown function of the component Password Reset Handler. Such manipulation leads to observable response discrepancy. This vulnerability is…
Reagiere als Erste:r — dein Feedback zählt!
SOCIAL SHARE CARD GENERATOR