CWE-640 - Weak Password Recovery Mechanism for Forgotten Password

CWE Weakness

Threat entity extracted from intelligence sources

Frequency

3

occurrences

First Seen

August 21, 2026

Last Seen

November 14, 2026

Overview

Recent Events

Related Clusters (2)

CVE-2026-111356: MacCMS v10 Password Recovery Vulnerability

Oct 16·1 sources

Critical Account Takeover Vulnerability in Red Hat Keycloak

Aug 21·4 sources

Related Articles (3)

Exploit for CVE-2026

Sploitus·10h ago

Maccms10 Password Reset Code Brute Force Account Takeover

hackmd.io·Oct 16

Warning: Critical Account Takeover via Password-reset Flow in Red Hat build of Keycloack, Patch I...

Ccb.Belgium.Be·Aug 21

Related Entities

Brute Force Data Breach Zero-day Exploit CVE-2026-18963 CVE-2026-4563 CVE-2026-75465 CWE-307 - Improper Restriction of Excessive Authentication Attempts CWE-770 - Allocation of Resources Without Limits or Throttling CWE-863 - Incorrect Authorization T1053 - Scheduled Task/Job T1098 - Account Manipulation T1110 - Brute Force