Skip to content

CVE record · 1 source

CVE-2026-120442

CVSS 9.8

ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens using…

Vendor: Xianhc
Product: ape-volo-admin
CVSS v3.1: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-1394

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

33

CVE NVD 1h ago

ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens using…

ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens using a hardcoded JWT signing key in appsettings.json. Attackers can sign tokens…

CVSS 9.8 CVE-2026-120442 Xianhc