Gotify: Insufficiently Protected Password Change endpoint

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-102603 · Microsoft / collected KEV context

EUVD-2026-98753

GHSA-3hcj-9m7p-wwm9

GO-2026-6772

cve-program · CVE-2026-102603

• https://github.com/gotify/server/security/advisories/GHSA-3hcj-9m7p-wwm9
• https://github.com/gotify/server/pull/952
• https://github.com/gotify/server/commit/a8744482c668e07a61798573ec8e17bd3f6009f9
• https://github.com/gotify/server/releases/tag/v3.0.0

euvd · EUVD-2026-98753

• https://github.com/gotify/server/security/advisories/GHSA-3hcj-9m7p-wwm9
• https://github.com/gotify/server/pull/952
• https://github.com/gotify/server/commit/a8744482c668e07a61798573ec8e17bd3f6009f9
• https://github.com/gotify/server/releases/tag/v3.0.0

nvd · CVE-2026-102603

• https://github.com/gotify/server/commit/a8744482c668e07a61798573ec8e17bd3f6009f9
• https://github.com/gotify/server/pull/952
• https://github.com/gotify/server/releases/tag/v3.0.0
• https://github.com/gotify/server/security/advisories/GHSA-3hcj-9m7p-wwm9

osv · GHSA-3hcj-9m7p-wwm9

• https://github.com/gotify/server/security/advisories/GHSA-3hcj-9m7p-wwm9
• https://nvd.nist.gov/vuln/detail/CVE-2026-102603
• https://github.com/gotify/server/pull/952
• https://github.com/gotify/server/commit/a8744482c668e07a61798573ec8e17bd3f6009f9
• https://github.com/gotify/server
• https://github.com/gotify/server/releases/tag/v3.0.0

osv · GO-2026-6772

• https://github.com/gotify/server/security/advisories/GHSA-3hcj-9m7p-wwm9
• https://nvd.nist.gov/vuln/detail/CVE-2026-102603
• https://github.com/gotify/server/commit/a8744482c668e07a61798573ec8e17bd3f6009f9
• https://github.com/gotify/server/pull/952
• https://github.com/gotify/server/releases/tag/v3.0.0

No related operational record is retained in the current change model.