A vulnerability was found in ci4-cms-erp ci4ms and classified as problematic. Affected is an unknown function of the component Password Reset Handler. Such manipulation leads to observable response discrepancy.
This vulnerability is uniquely identified as CVE-2026-25509. The attack can be launched remotely. No exploit exists.
It is suggested to upgrade the affected component.
