CVE-2026-122049
Deferred Deferred - Pending Action

Authentication Bypass in Campcodes Bitcoin Wallet System

Publication date: 2026-11-05

Last updated on: 2026-11-05

Assigner: VulDB

Description
A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function random_int of the file core/app/Http/Controllers/Auth/ForgotPasswordController.php. This manipulation causes improper restriction of excessive authentication attempts. Remote exploitation of the attack is possible. The attack's complexity is rated as high. It is indicated that the exploitability is difficult. The exploit has been published and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-05
Last Modified
2026-11-05
Generated
2026-11-05
AI Q&A
2026-11-05
EPSS Evaluated
N/A
NVD
CVE-2026-122049

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Campcodes Bitcoin Wallet System 1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-307 The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.
CWE-799 The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in Campcodes Bitcoin Wallet System 1.0, specifically in the random_int function of core/app/Http/Controllers/Auth/ForgotPasswordController.php. It allows improper restriction of excessive authentication attempts, meaning attackers could repeatedly try to guess passwords or bypass security measures. The flaw has a high attack complexity and is difficult to exploit, but a public exploit exists.

Impact Analysis

If exploited, this vulnerability could allow unauthorized access to user accounts by bypassing authentication limits. Attackers might gain control of Bitcoin wallets or sensitive data, leading to financial loss or data breaches. The impact depends on the system's exposure and user privileges.

Mitigation Strategies

Implement rate limiting on authentication attempts to prevent brute force attacks. Review and restrict access to the core/app/Http/Controllers/Auth/ForgotPasswordController.php file. Monitor authentication logs for unusual activity. Update to a patched version if available.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-122049. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...