CVE-2026-27462
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Aug 21, 2026
Vendor
unknown
Description
Combodo iTop is a web based IT service management tool. Prior to 3.2.3, iTop returns different responses for valid/invalid usernames depending on multiple factors in the reset password mechanism, leading to user enumeration. This issue has been fixed in version 3.2.3.