CVE-2026-121553

4.8 MEDIUMpublic exploit available

Published 2026-11-03 · Updated 2026-11-03

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Cotonti through 1.0.0 generates registration and email-change validation tokens with md5(microtime()), allowing attackers to bypass email-ownership verification by predicting tokens. Attackers can derive the generation time from the HTTP Date header and compute candidate tokens offline. They then submit these tokens to the users.register.php validate handler to activate accounts or confirm email addresses they do not control.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Weaknesses

CWE-338

Public exploit & PoC references

https://github.com/Cotonti/Cotonti
https://github.com/Cotonti/Cotonti/blob/1.0.0/modules/users/inc/users.functions.php#L97
https://github.com/Cotonti/Cotonti/blob/1.0.0/modules/users/inc/users.profile.php#L116
https://github.com/Cotonti/Cotonti/blob/1.0.0/modules/users/inc/users.register.php#L148
https://github.com/Cotonti/Cotonti/issues/1904
https://github.com/Cotonti/Cotonti/pull/1905

All references

https://github.com/Cotonti/Cotonti
https://github.com/Cotonti/Cotonti/blob/1.0.0/modules/users/inc/users.functions.php#L97
https://github.com/Cotonti/Cotonti/blob/1.0.0/modules/users/inc/users.profile.php#L116
https://github.com/Cotonti/Cotonti/blob/1.0.0/modules/users/inc/users.register.php#L148
https://github.com/Cotonti/Cotonti/issues/1904
https://github.com/Cotonti/Cotonti/pull/1905
https://www.vulncheck.com/advisories/cotonti-through-1.0.0-predictable-validation-tokens-via-md5-microtime

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

UNSCOREDCVE-2026-102813
MEDIUMCVE-2026-104356PoC
LOWCVE-2026-107283PoC
HIGHCVE-2026-107612
LOWCVE-2026-112041PoC
UNSCOREDCVE-2026-112240
UNSCOREDCVE-2026-118986
LOWCVE-2026-19742PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.