MobiAPParc CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH MobiAPParc CVE published 2026-09-17

CVE-2026-14850

CVE-2026-14850 debrief: The password reset functionality, used for account management, is vulnerable to unauthorized account modification due to improper validation of the user_id parameter. This predictable numeric identifier can be manipulated by an attacker to reset passwords for arbitrary users without proving account ownership, potentially leading to security incidents. Defenders and administrators s [truncated]