Unrated severityNVD Advisory· Published Mar 19, 2026· Updated Mar 19, 2026
OPEXUS eComplaint and eCase insecure password reset
CVE-2026-32865
Description
OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'. An attacker who knows an existing user's email address can reset the user's password and security questions. Existing security questions are not asked during the process.
Affected products
4- Range: <10.1.0.0
- OPEXUS/eCASEv5Range: 0
- OPEXUS/eComplaintv5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.