CVE-2025-26522

This vulnerability exists in RupeeWeb trading platform due to improper implementation of OTP validation mechanism in certain API endpoints. A remote attacker with valid credentials could exploit this vulnerability by manipulating API responses. Successful exploitation of this vulnerability could allow the attacker to bypass Two-Factor Authentication (2FA) for other user accounts.

This vulnerability exists in RupeeWeb trading platform due to improper implementation of OTP validation mechanism in certain API endpoints. A remote attacker with valid credentials could exploit this vulnerability by manipulating API responses. Successful exploitation of this vulnerability could allow the attacker to bypass Two-Factor Authentication (2FA) for other user accounts.

Esta vulnerabilidad existe en RupeeWeb trading platform debido a la implementación incorrecta del mecanismo de validación OTP en ciertos endpoints de API. Un atacante remoto con credenciales válidas podría aprovechar esta vulnerabilidad manipulando las respuestas de API. La explotación exitosa de esta vulnerabilidad podría permitir al atacante eludir la autenticación de dos factores (2FA) para otras cuentas de usuario.