Skip to content
Threat Feed
Subscribe

Tag

Password-Guessing

1 brief RSS
critical advisory

Tandoor Recipes Unauthenticated Password Guessing Vulnerability (CVE-2026-33152)

Tandoor Recipes before 2.6.0 allows unauthenticated attackers to perform high-speed password guessing attacks against any known username due to improper rate limiting on API endpoints using BasicAuthentication.

Tandoor Recipes CVE-2026-33152 tandoor-recipes password-guessing credential-access
2r 1t