Skip to content

CVE record · 1 source

CVE-2026-125298

CVSS 9.8

AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT).

Vendor: AsiaInfo International
Product: Business Support System, aether-menu
CVSS v3.1: 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-347

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

45

CVE NVD 4h ago

AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT).

AsiaInfo Business Support System (BSS) 9.2.0 through 9.2.40 does not correctly verify cryptographic signatures for JSON Web Tokens (JWT). A remote, unauthenticated attacker could forge a well-formed JWT without a valid signature…

CVSS 9.8 Fix available CVE-2026-125298 AsiaInfo International