CVE-2026-19877High· 7.5▾ TwilightINFINITT ULite 5.0.2.1_BN48_20260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the password within the …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
INFINITT ULite 5.0.2.1_BN48_20260528 and earlier protects image-share links with a low-entropy password and does not restrict repeated password attempts, allowing an unauthenticated remote attacker to brute-force the password within the link validity window and gain unauthorized access to shared medical images. Fixed in ULite 5.0.2.1 BN50.
infinitt_ulite <= 5.0.2.1_BN48_20260528Upgrade to INFINITT ULite 5.0.2.1 BN50 or later. Generate share passwords with at least 128 bits of entropy, and rate-limit / lock out repeated attempts (count failures against the per-link quota).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-19876Medium· 6.1Reflected XSS in INFINITT ULite login error page (pre-auth)
CVE-2026-16305NoneCVE-2026-16305
CVE-2026-16306NoneCVE-2026-16306
CVE-2025-12547Low· 3.7A vulnerability was identified in LogicalDOC Community Edition up to 9.2.1
CVE-2025-66204High· 8.1WBCE CMS is a content management system
CVE-2026-122049Low· 3.7Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication