CVE-2022-27157

score

<0.1

cvss

9.8

epss

1.2%

published

2022-04-15

kev added

—

first seen

2026-10-21

pearweb < 1.32 contains a weak password recovery mechanism caused by include/users/passwordmanage.php, letting attackers potentially recover passwords or bypass recovery, exploit requires access to the recovery functionality.