Tag

CVE-2026-33152

1 brief RSS

Tandoor Recipes Unauthenticated Password Guessing Vulnerability (CVE-2026-33152)

Tandoor Recipes before 2.6.0 allows unauthenticated attackers to perform high-speed password guessing attacks against any known username due to improper rate limiting on API endpoints using BasicAuthentication.

Tandoor Recipes CVE-2026-33152 tandoor-recipes password-guessing credential-access

2r 1t Jan 9, 2024