Pivot client application vulnerability

The password reset mechanism for the Pivot client application is weak, and it may allow an attacker to take over the account.

Published 4 Dec 2025Updated 18 Oct 20263 sources
CVSS 8.7

What happened

The password reset mechanism for the Pivot client application is weak, and it may allow an attacker to take over the account.

Affected versions

Pivot client application: before 1.36.2 (custom) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

No public PoC reference has passed the current publication threshold.