Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Kompini records in CISA KEVNo Kompini vulnerabilities are listed in CISA KEV.
Priority MEDIUM 48
The ‘/password/guardarClau/recover’ endpoint accepts the ‘usuariId’ parameter, which specifies the account whose password is to be changed.
CVSS 4.0CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00419 · Published 2026-09-22 · Fixed in 25 November 2025 CWE-639
Open these records in search →