Account Management Portal vulnerabilities

2 known vulnerabilities in Account Management Portal from Telekom. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Account Management Portal: Improper Restriction of Excessive Authentication Attempts

  CVE-2025-69615Mar 10, 2026Telekom

  Incorrect Access Control via missing 2FA rate-limiting allowing unlimited brute-force retries and full MFA bypass with no user interaction required. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-24, fixed 2025

• 9.4 Critical severity

  Account Management Portal: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2025-69614Mar 10, 2026Telekom

  Incorrect Access Control via activation token reuse on the password-reset endpoint allowing unauthorized password resets and full account takeover. Affected Product: Deutsche Telekom AG Telekom Account Management Portal, versions before 2025-10-27, fixed 2025-