CVE-2026-121926

A flaw was found in jt808-server. The application's Web Management API fails to enforce authentication due to misconfigured request handling in WebMvcConfig.addInterceptors. A remote, unauthenticated attacker can exploit this flaw by sending direct requests to restricted management endpoints,...

CVE-2026-121926

A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abdf83e. Affected is the function WebMvcConfig.addInterceptors of the component Web Management API. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is...

CVE-2026-121926

A vulnerability exists in the Web Management API component of yezhihao jt808-server (up to a07f68c466b560b97ef41edb8a4966469abdf83e ). The issue resides in the WebMvcConfig.addInterceptors function, where improper authentication allows for missing authentication during remote attacks. Due to a ro...

EUVD-2026-117001

A vulnerability was detected in yezhihao jt808-server up to a07f68c466b560b97ef41edb8a4966469abdf83e. Affected is the function WebMvcConfig.addInterceptors of the component Web Management API. The manipulation results in missing authentication. The attack may be launched remotely. The exploit is...