EUVD-2026-75162

An issue was discovered in s-pms SPMS-Server through v1.0. The application contains a hardcoded default access token secret within its core configuration file, which is not overridden or removed in the production environment profile. A remote, unauthenticated attacker can locally forge valid...

CVE-2026-71801

CVE-2026-71801 affects s-pms SPMS-Server through v1.0 . The root cause is a hardcoded default access token secret embedded in the core configuration file that is neither overridden nor removed in the production environment profile. This allows a remote, unauthenticated attacker to locally forge v...