CVE-2026-122049
Campcodes Bitcoin Wallet System ForgotPasswordController.php random_int excessive authentication
CVSS Score
3.7
EPSS Score
0.0%
EPSS Percentile
0th
A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function random_int of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is possible. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been published and may be used.
| CWE | CWE-307 CWE-799 |
| Vendor | campcodes |
| Product | bitcoin wallet system |
| Published | Nov 4, 2026 |
Stay Ahead of the Next One
Get instant alerts for campcodes bitcoin wallet system
Be the first to know when new low vulnerabilities affecting campcodes bitcoin wallet system are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Campcodes / Bitcoin Wallet System
1.0
References
vuldb.com: https://vuldb.com/vuln/431126 vuldb.com: https://vuldb.com/vuln/431126/cti vuldb.com: https://vuldb.com/cve/CVE-2026-122049 vuldb.com: https://vuldb.com/submit/1025182 tracexlabs.com: https://tracexlabs.com/releases/campcodes-bitcoin-wallet-reset-code-flaws.html campcodes.com: https://www.campcodes.com/
Credits
🔍 SanthoshKumar (VulDB User)