Unknown Magic Link vulnerabilities

• unknown magic link Magic Link < 2.2.6 - Subscriber+ Privilege Escalation via Magic Link Generation CVE-2026-121848 8.8 HighNovember 7, 2026
• unknown social login, passkeys, magic link & email otp Passwordless Login by VentraConnect < 1.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force CVE-2026-13142 8.1 HighJuly 20, 2026