NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-48902
Summary

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set.

Publication Date May 27, 2026, 2:16 a.m.
Registration Date May 27, 2026, 4:08 a.m.
Last Update May 27, 2026, 2:16 a.m.
Related information, measures and tools
Common Vulnerabilities List