A Weak Password Recovery Mechanism for Forgotten Password vulnerability exists in LIBRID/LIBREF from version 2.01.0.2183 up to but not including 18.9.26.2319. This issue allows for Password Recovery Exploitation. The CVE record was published on 2026-09-10T14:17:05.850Z and has not been modified since then. The NVD entry is currently Deferred. Defenders and administrators responsible for LIBRID/LIBREF syst [truncated]
MEDIUMAnkaref Innovation and Technology Inc.CVE published 2026-09-10
A stored cross-site scripting (XSS) vulnerability exists in LIBRID/LIBREF versions from 2.01.0.2183 before 18.9.26.2319. This issue allows an attacker to inject malicious scripts into web pages, potentially leading to security consequences. The CVE record was published on 2026-09-10T14:16:59.963Z and was last modified on 2026-09-23T09:17:07.490Z. The NVD entry is currently Deferred.
MEDIUMAnkaref Innovation and Technology Inc.CVE published 2026-09-10
A stored cross-site scripting (XSS) vulnerability exists in LIBRID/LIBREF versions from 2.01.0.2183 before 18.9.26.2319. This issue allows an attacker to inject malicious scripts into web pages, potentially leading to security consequences. The CVE record was published on 2026-09-10T14:16:59.827Z and was last modified on 2026-09-23T09:17:06.227Z. Defenders should assess their exposure and prioritize patch [truncated]
