CVE-2024-38287

CRITICAL 9.8CVE-2024-38287 · Published 25/07/2024 · updated 17/06/2026

In short

CVE-2024-38287 is a CRITICAL (CVSS 9.8) vulnerability affecting turbomeeting (rhubcom).
Chance of exploitation in the next 30 days (EPSS): 0.54%, higher than 45.7% of all vulnerabilities.
Fix: update to 8.0 or later.

Package	Affected versions	Patched versions
turbomeeting rhubcom	`< 8.0`	`8.0`

Description

The password-reset mechanism in the Forgot Password functionality in R-HUB TurboMeeting through 8.x allows unauthenticated remote attackers to force the application into resetting the administrator's password to a random insecure 8-digit value.

References

google/security-research security advisory · Third Party Advisory
rhubcom.com/v5/manuals.html · Product

More vulnerabilities in turbomeeting

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free