CVE-2026-125758

Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by using the publicly known example AUTHSECRET. Attackers can enumerate registered e-mails via /api/auth/signin, forge HS256 JWTs redeemed by...

CVE-2026-125758 Aptabase before commit 61d4c01 Authentication Bypass via Known Example AUTH_SECRET

Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by using the publicly known example AUTHSECRET. Attackers can enumerate registered e-mails via /api/auth/signin, forge HS256 JWTs redeemed by...

CVE-2026-125758

The Aptabase platform, in versions prior to commit 61d4c01 , is susceptible to an authentication bypass vulnerability caused by the use of a publicly known example AUTH_SECRET (CWE-1188). This flaw allows unauthenticated attackers to forge sign-in links and generate HS256 JWTs that are accepted b...

CVE-2026-125758: aptabase: Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to…

Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by using the publicly known example AUTHSECRET. Attackers can enumerate registered e-mails via /api/auth/signin, forge HS256 JWTs redeemed by...