CVE-2026-22794

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

January 22, 2026

Last Seen

January 26, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Appsmith Vulnerability Enables Account Takeovers87.6

A critical authentication vulnerability in the Appsmith low-code platform, tracked as CVE-2026-22794, has been exploited to facilitate user account takeovers. The flaw allows attackers to manipulate password reset links by abusing a client-controlled HTTP header, leading to full account compromise d...