tag
Missing-Rate-Limiting
Medium
Tornet Scooter Mobile App OTP Brute Force via Missing Rate Limiting (CVE-2026-7671)
CVE-2026-7671·
Tornet Scooter Mobile App backend (/TwoFactor endpoint), Android app v4.75
unpatched
High
JeecgBoot mLogin Endpoint CAPTCHA Bypass Enabling Credential Brute Force (CVE-2026-8196)
CVE-2026-8196·
JeecgBoot (/sys/mLogin endpoint)
unpatched