Telekom vulnerabilities
We track 2 vulnerabilities in Telekom products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 10, 2026.
2vulnerabilities
2critical
0high
0exploited
9.3average CVSS score
Latest Telekom vulnerabilities
- 9.1 Critical severity
Account Management Portal: Improper Restriction of Excessive Authentication Attempts
Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-24, fixed 2025
- 9.4 Critical severity
Account Management Portal: Weak Password Recovery Mechanism for Forgotten Password
Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-27, fixed 2025-