CVE-2024-3777

9.8 criticalEPSS 0.7%

Critical (9.8) in ai3 qbibot. EPSS 0.7% chance of exploitation in the next 30 days.

The password reset feature of Ai3 QbiBot lacks proper access control, allowing unauthenticated remote attackers to reset any user's password.

Severity

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-306
Published: 2024-04-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19