Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/02/14 2:40 p.m.•35 views

CVE-2025-26340

A CWE-321 "Use of Hard-coded Cryptographic Key" in the JWT signing in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to bypass the authentication via crafted HTTP requests...

8.8CVSS7.4AI score0.01173EPSS
SaveExploits0References1
NVD
NVD
•added 2025/02/12 2:15 p.m.•44 views

CVE-2025-26340

A CWE-321 "Use of Hard-coded Cryptographic Key" in the JWT signing in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to bypass the authentication via crafted HTTP requests...

8.8CVSS0.01173EPSS
SaveExploits0References1
OSV
OSV
•added 2025/02/12 2:15 p.m.•15 views

CVE-2025-26340

A CWE-321 "Use of Hard-coded Cryptographic Key" in the JWT signing in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to bypass the authentication via crafted HTTP requests...

8.8CVSS6.7AI score0.01173EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/12 1:26 p.m.•48 views

CVE-2025-26340

A CWE-321 "Use of Hard-coded Cryptographic Key" in the JWT signing in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to bypass the authentication via crafted HTTP requests...

8.8CVSS0.01173EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/12 1:26 p.m.•14 views

CVE-2025-26340

A CWE-321 "Use of Hard-coded Cryptographic Key" in the JWT signing in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to bypass the authentication via crafted HTTP requests...

8.8CVSS7.4AI score0.01173EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/12 1:26 p.m.•110 views

CVE-2025-26340

CVE-2025-26340 describes a CWE-321 vulnerability in Q-Free MaxTime (

8.8CVSS7.5AI score0.01173EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder