CVE-2026-102248

7.3 HIGHpublic exploit available

Published 2026-09-29 · Updated 2026-09-29

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A vulnerability was identified in Rebuild up to 4.4.7/4.5.0-beta5. This affects an unknown part of the file /user/login of the component Login Endpoint. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-287

Public exploit & PoC references

https://github.com/ASantsSec/CVE/issues/25

All references

https://github.com/ASantsSec/CVE/issues/25
https://vuldb.com/cve/CVE-2026-102248
https://vuldb.com/submit/933708
https://vuldb.com/vuln/411150
https://vuldb.com/vuln/411150/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2025-43936
HIGHCVE-2026-100606PoC
HIGHCVE-2026-100607PoC
HIGHCVE-2026-100684PoC
HIGHCVE-2026-100709PoC
HIGHCVE-2026-100746PoC
HIGHCVE-2026-100871PoC
MEDIUMCVE-2026-100876PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.