CVE-2026-46347Published
Goobi viewer: Predictable Replacement Password Allows Account Takeover After Password Reset
Exact source revision recorded 23 Oct 2026 16:01:20 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-46347 · Microsoft / collected KEV context
cve-program · CVE-2026-46347
- https://github.com/intranda/goobi-viewer-core/security/advisories/GHSA-hw9w-7r6g-2fjc
- https://github.com/intranda/goobi-viewer-core/commit/1fa7a30a3a7699a82ea0df9c1a8997b2894d7841
- https://github.com/intranda/goobi-viewer-core/commit/9c2c83f00f497c11ab6aaa0bd5a68173cd446eef
- https://github.com/intranda/goobi-viewer-core/releases/tag/v26.05
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.