Business Logic Errors (CWE-840)FREE AcademyEmail Verification Bypass / Email Squatting via Client-Side `accounts.setAccountInfo`gpk21152May 30, 2026CVSS5.3€150
Improper Access Control - Generic (CWE-284)FREE AcademyAdmin Panel Exposure via WAF Bypass (URL Encoding) + Broken reCAPTCHA + Internal Info Leakgpk21115May 30, 2026CVSS5.3€250
Business Logic Errors (CWE-840)FREE AcademyPayment Method Validation Bypass via Order Update Flowgpk21102May 30, 2026CVSS8.9€1,880