CVE-2026-111633High· 8.6▾ TwilightZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 47.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
ZKEACMS through 4.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge REST API JWT bearer tokens using a hard-coded HMAC-SHA256 signing key in JwtBearerDefaults.cs. Attackers can sign a token with the Name claim set to 'admin' to call ApiAuthorize endpoints, modifying articles and products and reading form submissions.
ZKEACMS <= 4.4Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111612High· 7.5netdisk-fast-download through 0.4.8 Credential Disclosure via /v2/randomAuth
CVE-2026-111636High· 8.1OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret
CVE-2026-111642High· 8.8FastapiAdmin through 3.0 Hard-Coded JWT Secret Privilege Escalation
CVE-2026-111690Critical· 9.8Simple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass
CVE-2026-111692Critical· 9.8DataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret
CVE-2026-111696Medium· 6.5data-platform-open through commit efeacd3 Hardcoded AES Key for Datasource Passwords