CVE-2026-122049Low· 3.7▾ TwilightPoC availableA flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function random_int of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authen…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 20.4 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.4%
A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function random_int of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is possible. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been published and may be used.
bitcoin_wallet_system 1.0Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-122050High· 7.3Campcodes Complete Sales and Inventory System with Credit Management login.php sql injection
CVE-2026-122048High· 7.3Campcodes Division Regional Athletic Meet Game Result Matrix System check-user.php sql injection
CVE-2026-122047High· 7.3Campcodes Complete Advance Loan Management System banner.php move_uploaded_file unrestricted upload
CVE-2026-121535Low· 3.7miroslavpejic85 MiroTalk P2P Room Action server.js checkPassword excessive authentication
CVE-2026-116007Low· 3.7YunaiV/zhijiantianya ruoyi-vue-pro SMS Code Verification SmsCodeServiceImpl.java SmsCodeServiceImpl.validateSmsCode0 excessive authentication
CVE-2026-111874Low· 3.7OpenCATS Career Portal CareersUI.php processLogin excessive authentication