CVE-2022-26313

CVE-2022-26313 is a critical vulnerability affecting Mendix Forgot Password Appstore module versions 3.3.0 through 3.5.0. This flaw allows an unauthenticated attacker to hijack arbitrary user accounts by exploiting a weakness in the sign-up flow. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low complexity, and high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating potential interest from threat actors.