MobiAPParc vulnerabilities

Products

• MobiAPParc 1

Latest MobiAPParc CVEs

Newest publication first

1. CVE-2026-14850 Weak password recovery mechanism for forgotten password in MobiAPParc

   Published 2026-09-17

   High·CVSS 8.8 EPSS 0.41%

   The password reset funcionality is vulnerable to unauthorized account modification due to improper validation of the user_id parameter. An attacker can manipulate this predictable numeric identifier to reset passwords for arbitrary users without proving account ownership.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.