U.S. Dept Of Defense · Report #2061982
Create account without auth via response manipulation
Validstatus
lowseverity
42upvotes
12 Jan 2026disclosed
How it was found
Description: hello team DoD <3 after searching i found register panel but it need verify event code to login , so i testing for that , i founded a Create account without auth via response manipulation
Impact
create and join a event without event code or verify email
System Host(s)
███
Affected Product(s) and Version(s)
CVE Numbers
Steps to Reproduce
Steps : 1- go to ██████ 2- click in i dont have CAC 3- now see the video PoC : i insert it