20 matches found
CVE-2026-52824
CVE-2026-52824: Kimai Default APPSECRET Login Link Forgery Field| Value ---|--- CVE| CVE-2026-52824 Advisory| GHSA-jr9p-4h4j-6c58 Severity| Critical CWE| CWE-1188, Initialization of a Resource with an Insecure Default Affected| kimai/kimai = 2.57.0 Fixed| 2.58.0 Advisory published| 2026-06-11 Add...
CVE-2026-54631
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env committed in the Part-DB repository contains a fixed value for APPSECRET a03498528f5a5fc089273ec9ae5b2849. The official Docker image jbtronics/part-db1 does not override or...
CVE-2026-54631
The inventory management system Part-DB is vulnerable to session forgery in versions prior to 2.12.1 . The root cause is a hardcoded APP_SECRET (a03498528f5a5fc089273ec9ae5b2849) in the .env file, which is also present in the official jbtronics/part-db1 Docker image. Because Symfony uses this sec...
EUVD-2026-108575
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env committed in the Part-DB repository contains a fixed value for APPSECRET a03498528f5a5fc089273ec9ae5b2849. The official Docker image jbtronics/part-db1 does not override or...
CVE-2026-54631 Part-DB: Hardcoded APP_SECRET enables forged remember-me cookie
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env committed in the Part-DB repository contains a fixed value for APPSECRET a03498528f5a5fc089273ec9ae5b2849. The official Docker image jbtronics/part-db1 does not override or...
CVE-2026-54631 Part-DB: Hardcoded APP_SECRET enables forged remember-me cookie
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the file .env committed in the Part-DB repository contains a fixed value for APPSECRET a03498528f5a5fc089273ec9ae5b2849. The official Docker image jbtronics/part-db1 does not override or...
CVE-2026-111636
OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default appsecret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenantdemo' to gain full tena...
CVE-2026-111636 OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret
OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default appsecret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenantdemo' to gain full tena...
CVE-2026-111636
OpenBMB StaffDeck versions through 0.5.6 are vulnerable to an authentication bypass due to a hard-coded default app_secret (CWE-322). This flaw allows unauthenticated attackers to forge HMAC-SHA256 session tokens for the seeded 'admin' user in the 'tenant_demo' tenant. Successful exploitation gra...
EUVD-2026-103058
OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default appsecret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenantdemo' to gain full tena...
CVE-2026-111636 OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret
OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default appsecret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenantdemo' to gain full tena...
CVE-2026-111636: Use of Hard-coded Cryptographic Key
OpenBMB StaffDeck through 0.5.6 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator session tokens using the hard-coded default appsecret. Attackers can sign an HMAC-SHA256 token for the seeded 'admin' user in 'tenantdemo' to gain full tena...
Kimai-CVE-2026-52824-POC
Kimai CVE-2026-52824 — Default APPSECRET Authentication Bypass Note: The repository URL contains an outdated CVE ID CVE-2026-49865. The correct and current CVE tracked in this repository is CVE-2026-52824 GHSA-jr9p-4h4j-6c58. Proof-of-concept exploit toolkit for the hardcoded default APPSECRET...
CVE-2026-52824
Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APPSECRET to the public value changethistosomethingunique in Dockerfile, and .docker/entrypoint.sh neither replaces nor rejects that value before Symfony uses it as kernel.secret. An unauthenticated...
CVE-2026-52824 Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover
Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APPSECRET to the public value changethistosomethingunique in Dockerfile, and .docker/entrypoint.sh neither replaces nor rejects that value before Symfony uses it as kernel.secret. An unauthenticated...
CVE-2026-52824
Kimai is an open-source time tracking application. Prior to version 2.58.0 , the official Docker image hardcodes APP_SECRET=change_this_to_something_unique in the Dockerfile, and the entrypoint script neither replaces nor validates this value before Symfony uses it as kernel.secret. An unauthenti...
CVE-2026-52824 Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover
Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APPSECRET to the public value changethistosomethingunique in Dockerfile, and .docker/entrypoint.sh neither replaces nor rejects that value before Symfony uses it as kernel.secret. An unauthenticated...
CVE-2026-52824 Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover
Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APPSECRET to the public value changethistosomethingunique in Dockerfile, and .docker/entrypoint.sh neither replaces nor rejects that value before Symfony uses it as kernel.secret. An unauthenticated...
EUVD-2026-78402
Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APPSECRET to the public value changethistosomethingunique in Dockerfile, and .docker/entrypoint.sh neither replaces nor rejects that value before Symfony uses it as kernel.secret. An unauthenticated...
CVE-2026-52824: Initialization of a Resource with an Insecure Default
Kimai is an open-source time tracking application. Prior to 2.58.0, the official Docker image sets APPSECRET to the public value changethistosomethingunique in Dockerfile, and .docker/entrypoint.sh neither replaces nor rejects that value before Symfony uses it as kernel.secret. An unauthenticated...