CVE-2026-44679

Tuist is a virtual platform team for Swift app devs. Prior to 1.180.10, the forgot password flow allows an unauthenticated attacker to repeatedly trigger password reset emails for a known account without server-side throttling. In self-hosted deployments, this can be abused to send large volumes of unwanted email and consume downstream email delivery resources. This vulnerability is fixed in 1.180.10.

• CWE-770

• https://github.com/tuist/tuist/security/advisories/GHSA-v7gr-7ww5-w4cx

Published

May 14, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-4467A vulnerability was found in Comfast CF-AC100 2.6.0.8. This …4.7
• CVE-2026-44670SiYuan is an open-source personal knowledge management syste…9.4
• CVE-2026-44671ZITADEL is an open source identity management platform. From…7.5
• CVE-2026-44672mapfish-print is a component of MapFish for printing templat…9.3
• CVE-2026-44673libyang is a YANG data modeling language library. Prior to S…7.5
• CVE-2026-44678Tuist is a virtual platform team for Swift app devs. In 1.18…7.1
• CVE-2026-4468A vulnerability was determined in Comfast CF-AC100 2.6.0.8. …4.7
• CVE-2026-44680MikroORM is a TypeScript ORM for Node.js based on Data Mappe…7.6
• CVE-2026-44681Authlib is a Python library which builds OAuth and OpenID Co…6.1
• CVE-2026-44682Local privilege escalation due to DLL hijacking vulnerabilit…7.3
• CVE-2026-44687In NLnet Labs Unbound 1.13.2 up to and including 1.25.1, stu…3.7
• CVE-2026-44688In Eclipse Theia versions prior to 1.71.0, the AI chat agent…8.8