CVE-2026-6285
HighCVSS 7.5Summary
A weak password recovery mechanism vulnerability exists in Ankaref Innovation and Technology Inc. LIBRID/LIBREF, allowing password recovery exploitation. The issue affects versions from 2.01.0.2183 through 10092026.
Risk Assessment
A weak password recovery mechanism may allow an attacker to take over a user account. The vendor was contacted but did not respond.
Recommendation
Given the vendor's lack of response, consider implementing additional security controls or alternative solutions. Monitor vendor communications for future patches.
Other vulnerabilities in LIBRID/LIBREF
See all- CVE-2026-12683Medium
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF from 2.01.0.2183 through 10092026. The vendor was contacted early about this disclosure but did not respond in any way.
- CVE-2026-12682Medium
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Stored XSS. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. The vendor was contacted early about this disclosure but did not respond in any way.
Original NVD description (English source)
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Password Recovery Exploitation. This issue affects LIBRID/LIBREF: from 2.01.0.2183 through 10092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.