PT-2026-141206

INDOTALENT WHMS Asp.Net-Core-Inventory-Order-Management-System before 10.20261109 contains an authentication bypass vulnerability caused by a hard-coded JWT signing key, issuer and audience in appsettings.json. Unauthenticated remote attackers can forge tokens for any user ID and role that the...