A AegiFlow
CRITICALCVSS 9.8

CVE-2026-48902

CVE-2026-48902 updated by NVD

Modified
2026-07-26
Sources
nvd

Summary

The password and username reset features created plain http links for https connections if the "Force SSL" flag wasn't explicitly set.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.