Lucene search
+L

5 matches found

NVD
NVD
added 2026/08/23 5:16 a.m.14 views

CVE-2026-78062

A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of the file lib/config.ts of the component JWT Secret Handler. The manipulation of the argument BETTERAUTHSECRET leads to hard-coded credentials. The attack can be initiated remotel...

7.5CVSS0.00288EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/23 4:15 a.m.18 views

EUVD-2026-64631

A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of the file lib/config.ts of the component JWT Secret Handler. The manipulation of the argument BETTERAUTHSECRET leads to hard-coded credentials. The attack can be initiated remotel...

7.5CVSS7.3AI score0.00288EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/23 4:15 a.m.34 views

CVE-2026-78062

CVE-2026-78062 affects vas3k TaxHacker up to version 0.8.2 . The vulnerability resides in the JWT Secret Handler component, specifically the envSchema.parse function in lib/config.ts. Manipulation of the BETTER_AUTH_SECRET argument results in hard-coded credentials , enabling remote unauthenticat...

7.5CVSS7.3AI score0.00288EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/23 4:15 a.m.41 views

CVE-2026-78062 vas3k TaxHacker JWT Secret config.ts envSchema.parse hard-coded credentials

A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of the file lib/config.ts of the component JWT Secret Handler. The manipulation of the argument BETTERAUTHSECRET leads to hard-coded credentials. The attack can be initiated remotel...

7.5CVSS0.00288EPSS
SaveExploits0References6
OSV
OSV
added 2026/08/23 4:15 a.m.14 views

CVE-2026-78062 vas3k TaxHacker JWT Secret config.ts envSchema.parse hard-coded credentials

A vulnerability was identified in vas3k TaxHacker up to 0.8.2. The affected element is the function envSchema.parse of the file lib/config.ts of the component JWT Secret Handler. The manipulation of the argument BETTERAUTHSECRET leads to hard-coded credentials. The attack can be initiated remotel...

6.9CVSS5.4AI score
SaveExploits0References8
Rows per page
Query Builder