{"id":"CVE-2026-71625","title":"An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component","summary":"An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-269","CWE-640"],"published":"2026-09-04","updated":"2026-09-09","sourceUpdated":"2026-09-09T20:20:22.297","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-71625","references":[{"url":"https://colorful-quill-4fe.notion.site/CVE-2026-71625-ThinkSNS-Plus-Account-Takeover-via-Expired-Verification-Code-in-Password-Reset-380e5670300c808bbf82ee8cf8ed25e3?source=copy_link","label":"cve@mitre.org"},{"url":"https://github.com/slimkit/plus","label":"cve@mitre.org"},{"url":"https://colorful-quill-4fe.notion.site/CVE-2026-71625-ThinkSNS-Plus-Account-Takeover-via-Expired-Verification-Code-in-Password-Reset-380e5670300c808bbf82ee8cf8ed25e3","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00401,"epssPercentile":0.34031,"ingestedAt":"2026-09-08T20:10:03.168Z","exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2026-09-09T19:11:16.593577Z"},"slug":"CVE-2026-71625","body":"## Overview\n\nAn issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":66,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202689,"id":"CVE-2026-71625","ts":1789402236942,"field":"exploit_available","old":"false","new":"true"},{"seq":201890,"id":"CVE-2026-71625","ts":1789399972436,"field":"cvss","old":null,"new":"9.8"},{"seq":201889,"id":"CVE-2026-71625","ts":1789399972436,"field":"severity","old":"none","new":"critical"},{"seq":200620,"id":"CVE-2026-71625","ts":1789397517275,"field":"cvss","old":"9.8","new":null},{"seq":200619,"id":"CVE-2026-71625","ts":1789397517275,"field":"severity","old":"critical","new":"none"},{"seq":199334,"id":"CVE-2026-71625","ts":1789395442514,"field":"cvss","old":null,"new":"9.8"},{"seq":199333,"id":"CVE-2026-71625","ts":1789395442514,"field":"severity","old":"none","new":"critical"},{"seq":198579,"id":"CVE-2026-71625","ts":1789392114816,"field":"cvss","old":"9.8","new":null},{"seq":198578,"id":"CVE-2026-71625","ts":1789392114816,"field":"severity","old":"critical","new":"none"},{"seq":198534,"id":"CVE-2026-71625","ts":1789392061341,"field":"cvss","old":null,"new":"9.8"},{"seq":198533,"id":"CVE-2026-71625","ts":1789392061341,"field":"severity","old":"none","new":"critical"},{"seq":196325,"id":"CVE-2026-71625","ts":1789383686401,"field":"cvss","old":"9.8","new":null},{"seq":196324,"id":"CVE-2026-71625","ts":1789383686401,"field":"severity","old":"critical","new":"none"},{"seq":195254,"id":"CVE-2026-71625","ts":1789380538145,"field":"cvss","old":null,"new":"9.8"},{"seq":195253,"id":"CVE-2026-71625","ts":1789380538145,"field":"severity","old":"none","new":"critical"},{"seq":194041,"id":"CVE-2026-71625","ts":1789378630919,"field":"cvss","old":"9.8","new":null},{"seq":194040,"id":"CVE-2026-71625","ts":1789378630919,"field":"severity","old":"critical","new":"none"},{"seq":192828,"id":"CVE-2026-71625","ts":1789376467962,"field":"cvss","old":null,"new":"9.8"},{"seq":192827,"id":"CVE-2026-71625","ts":1789376467962,"field":"severity","old":"none","new":"critical"},{"seq":191615,"id":"CVE-2026-71625","ts":1789373538563,"field":"cvss","old":"9.8","new":null},{"seq":191614,"id":"CVE-2026-71625","ts":1789373538563,"field":"severity","old":"critical","new":"none"},{"seq":190400,"id":"CVE-2026-71625","ts":1789369415425,"field":"cvss","old":null,"new":"9.8"},{"seq":190399,"id":"CVE-2026-71625","ts":1789369415425,"field":"severity","old":"none","new":"critical"},{"seq":189187,"id":"CVE-2026-71625","ts":1789368330606,"field":"cvss","old":"9.8","new":null},{"seq":189186,"id":"CVE-2026-71625","ts":1789368330606,"field":"severity","old":"critical","new":"none"},{"seq":187970,"id":"CVE-2026-71625","ts":1789365199026,"field":"cvss","old":null,"new":"9.8"},{"seq":187969,"id":"CVE-2026-71625","ts":1789365199026,"field":"severity","old":"none","new":"critical"},{"seq":186757,"id":"CVE-2026-71625","ts":1789363401045,"field":"cvss","old":"9.8","new":null},{"seq":186756,"id":"CVE-2026-71625","ts":1789363401045,"field":"severity","old":"critical","new":"none"},{"seq":185543,"id":"CVE-2026-71625","ts":1789361181569,"field":"cvss","old":null,"new":"9.8"},{"seq":185542,"id":"CVE-2026-71625","ts":1789361181569,"field":"severity","old":"none","new":"critical"},{"seq":184330,"id":"CVE-2026-71625","ts":1789358259100,"field":"cvss","old":"9.8","new":null},{"seq":184329,"id":"CVE-2026-71625","ts":1789358259100,"field":"severity","old":"critical","new":"none"},{"seq":182581,"id":"CVE-2026-71625","ts":1789354274625,"field":"cvss","old":null,"new":"9.8"},{"seq":182580,"id":"CVE-2026-71625","ts":1789354274625,"field":"severity","old":"none","new":"critical"},{"seq":181374,"id":"CVE-2026-71625","ts":1789353231311,"field":"cvss","old":"9.8","new":null},{"seq":181373,"id":"CVE-2026-71625","ts":1789353231311,"field":"severity","old":"critical","new":"none"},{"seq":180167,"id":"CVE-2026-71625","ts":1789350227140,"field":"cvss","old":null,"new":"9.8"},{"seq":180166,"id":"CVE-2026-71625","ts":1789350227140,"field":"severity","old":"none","new":"critical"},{"seq":178960,"id":"CVE-2026-71625","ts":1789348202580,"field":"cvss","old":"9.8","new":null},{"seq":178959,"id":"CVE-2026-71625","ts":1789348202580,"field":"severity","old":"critical","new":"none"},{"seq":177753,"id":"CVE-2026-71625","ts":1789346331205,"field":"cvss","old":null,"new":"9.8"},{"seq":177752,"id":"CVE-2026-71625","ts":1789346331205,"field":"severity","old":"none","new":"critical"},{"seq":176546,"id":"CVE-2026-71625","ts":1789343115939,"field":"cvss","old":"9.8","new":null},{"seq":176545,"id":"CVE-2026-71625","ts":1789343115939,"field":"severity","old":"critical","new":"none"},{"seq":174663,"id":"CVE-2026-71625","ts":1789334839296,"field":"cvss","old":null,"new":"9.8"},{"seq":174662,"id":"CVE-2026-71625","ts":1789334839296,"field":"severity","old":"none","new":"critical"},{"seq":173458,"id":"CVE-2026-71625","ts":1789333608005,"field":"cvss","old":"9.8","new":null},{"seq":173457,"id":"CVE-2026-71625","ts":1789333608005,"field":"severity","old":"critical","new":"none"},{"seq":172272,"id":"CVE-2026-71625","ts":1789331055038,"field":"cvss","old":null,"new":"9.8"}]}