Information Disclosure

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. Download Manager <= 3.3.71 - Authenticated (Subscriber+) Sensitive Information Exposure via Email Template Token Injection in 'first_name' Profile Field Token Injection into Suspe…CVE-2026-103964codename065 · CVSS 4.3 · 0.2% likely

   CWE-200

2. Download Manager <= 3.3.49 - Missing Authorization to Authenticated (Subscriber+) User Email Enumeration via 'user' ParameterCVE-2026-2571codename065 · CVSS 4.3 · 0.2% likely

   CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.