CVE-2026-126803

The software Rote through 2.6.0 is vulnerable to a privilege escalation vulnerability. Authenticated admins can obtain super_admin rights by accessing the /v2/api/admin/settings endpoint, which allows for the reading or overwriting of JWT signing secrets . Specifically, attackers can retrieve the...

EUVD-2026-124018

Rote through 2.6.0 contains a privilege escalation vulnerability that allows authenticated admins to obtain superadmin rights by reading or overwriting JWT signing secrets via /v2/api/admin/settings. Attackers can retrieve the unmasked jwtSecret from the security settings group and forge HS256...