CVE-2026-126803

Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain superadmin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the security settings group and forge HS256...

CVE-2026-126803

The software Rote through 2.6.0 is vulnerable to a privilege escalation vulnerability. Authenticated admins can obtain super_admin rights by accessing the /v2/api/admin/settings endpoint, which allows for the reading or overwriting of JWT signing secrets . Specifically, attackers can retrieve the...

CVE-2026-126803

Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain superadmin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the security settings group and forge HS256...

EUVD-2026-124018

Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain superadmin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the security settings group and forge HS256...

CVE-2026-126803 Rote through 2.6.0 Privilege Escalation via Admin Settings API JWT Secret Exposure

Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain superadmin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the security settings group and forge HS256...

CVE-2026-126803 Rote through 2.6.0 Privilege Escalation via Admin Settings API JWT Secret Exposure

Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain superadmin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the security settings group and forge HS256...

CVE-2026-126803: Rabithua Rote: Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain super_admin…

Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain superadmin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the security settings group and forge HS256...

PT-2026-145460

Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain super admin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the security settings group and forge HS256...

CVE-2026-104867

Immich is a high-performance self-hosted photo and video management solution. From 3.0.0 until 3.2.0, the GET /api/admin/users/id/calendar-heatmap route in server/src/controllers/user-admin.controller.ts uses the ordinary Permission.UserRead permission without an admin-route requirement, and...

EUVD-2026-117603

Immich is a high-performance self-hosted photo and video management solution. From 3.0.0 until 3.2.0, the GET /api/admin/users/id/calendar-heatmap route in server/src/controllers/user-admin.controller.ts uses the ordinary Permission.UserRead permission without an admin-route requirement, and...

CVE-2026-119597

OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json. Attackers can mint HS256 bearer tokens with an Admin role claim to access /api/admin...

EUVD-2026-113934

OpenDeepWiki through 2.0.6 contains a hard-coded JWT signing key vulnerability that allows unauthenticated attackers to forge administrator tokens using the publicly known Jwt:SecretKey in appsettings.json. Attackers can mint HS256 bearer tokens with an Admin role claim to access /api/admin...

CVE-2026-114621

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to l...

EUVD-2026-108991

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to l...

CVE-2026-114621

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to l...

PT-2026-122100

baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, list and detail actions in the Admin and Api/Admin prefixes pass request query parameters, including contain, conditions, fields, finder, and order, directly to the ORM as options. A user able to l...

baserproject baserCMS SQL injection vulnerability

BaserProject baserCMS versions prior to 5.0.0 and 5.3.2, as well as versions prior to 5.4.0 and 5.4.2, contain an SQL injection vulnerability. This vulnerability arises because list and detail operations in Admin and Api/Admin prefixes include request query parameters such as contain, conditions,...

CVE-2026-111046

FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails open for inactive non-core modules because its early return on !isExtensionActive skips the module-access and managesettings checks. A low-privileged staff account with...

EUVD-2026-104415

FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails open for inactive non-core modules because its early return on !isExtensionActive skips the module-access and managesettings checks. A low-privileged staff account with...

PT-2026-117459

FOSSBilling is an open source billing and client-management platform. From 0.8.4 until 0.8.6, hasManagePermission fails open for inactive non-core modules because its early return on !isExtensionActive skips the module-access and manage settings checks. A low-privileged staff account with...