Cpe:2.3:a:hotgo:hotgo:*:*:*:*:*:*:*:*

HotGo versions up to 2.15.1 contain an authentication bypass vulnerability allowing unauthenticated attackers to hijack user and administrator accounts via a predictable SMS verification code.