https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T16:43:42.858376+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-26060 CVE-2026-26060 — Fleet: Password reset tokens remain valid after password change for 24 hours 2026-10-06T16:43:43.003438+00:00

Affected: fleetdm fleet

Fleet is open source device management software. Prior to 4.81.0, a vulnerability in Fleet’s password management logic could allow previously issued password reset tokens to remain valid after a user changes their password. As a result, a stale password reset token could be reused to reset the account password even after a defensive password change. Version 4.81.0 patches the issue.