AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-40766

CRITICAL · CVSS 9.8 EPSS 0.75%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-08-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2023-40766
Severity
CRITICAL
CVSS
9.8
EPSS
0.75%

Original NVD Description

User enumeration is found in in PHPJabbers Ticket Support Script v3.2. This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.