Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

1 matching record.

1. 33
   CVE NVD 1h ago

   ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens using…

   ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens using a hardcoded JWT signing key in appsettings.json. Attackers can sign tokens…

   CVSS 9.8 CVE-2026-120442 Xianhc

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Xianhc&limit=100. RSS for this section: feed.xml.