← Back

Account Management Portal

account_management_portal

Vendor: Telekom • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-69615
1Telekom
1Account Management Portal
Jun 17, 2026
Mar 10, 2026
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required. Affected Product: Deutsche Telekom AG Telekom Account Management Portal...Show more
Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-24, fixed 2025-11-03.Show less
CVE-2025-69614
1Telekom
1Account Management Portal
Jun 17, 2026
Mar 10, 2026
N/A· v4
9.4 CRITICAL· v3
N/A· v2
Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover. Affected Product: Deutsche Telekom AG Telekom Account Management Portal,...Show more
Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-27, fixed 2025-10-31.Show less