CVE-2026-6285
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk21th percentile - higher than 21% of all known CVEs
Summary
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Password Recovery Exploitation. This issue affects LIBRID/LIBREF from 2.01.0.2183 before 18.9.26.2319.
Risk Assessment
An attacker can exploit the weak password recovery mechanism to take over user accounts, potentially leading to unauthorized system access.
Recommendation
Update LIBRID/LIBREF to version 18.9.26.2319 or later. Harden the password recovery mechanism if an update is not possible.
Other vulnerabilities in LIBRID/LIBREF
See all- CVE-2026-12683Medium
LIBRID/LIBREF by Ankaref Innovation and Technology Inc. has a stored XSS vulnerability due to improper input neutralization during web page generation. Affects versions from 2.01.0.2183 before 18.9.26.2319.
- CVE-2026-12682Medium
LIBRID/LIBREF by Ankaref Innovation and Technology Inc. has a stored XSS vulnerability due to improper input neutralization during web page generation. Affects versions from 2.01.0.2183 before 18.9.26.2319.
Original NVD description (English source)
Weak Password Recovery Mechanism for Forgotten Password vulnerability in Ankaref Innovation and Technology Inc. LIBRID/LIBREF allows Password Recovery Exploitation. This issue affects LIBRID/LIBREF: from 2.01.0.2183 before 18.9.26.2319.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS