CVE-2025-12866 – Hundred Plus｜EIP Plus – Weak Password Recovery Mechanism

CVE ID : CVE-2025-12866

Published : Nov. 10, 2025, 3:15 a.m. | 15 minutes ago

Description : EIP Plus developed by Hundred Plus has a Weak Password Recovery Mechanism vulnerability, allowing unauthenticated remote attacker to predict or brute-force the ‘forgot password’ link, thereby successfully resetting any user’s password.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…