CVE-2026-111690Critical· 9.8▾ MidnightSimple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens by using the hard-coded Auth.AccessSecret in api/etc/core.yaml. Attackers can sign …
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 53.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Simple Admin Core through 1.8.7 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge super administrator tokens by using the hard-coded Auth.AccessSecret in api/etc/core.yaml. Attackers can sign a JWT with the public secret and roleId claim 001 to gain full administrative control over users, roles, menus, API authorities, configuration and tokens.
simple-admin-core <= 1.8.7Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111612High· 7.5netdisk-fast-download through 0.4.8 Credential Disclosure via /v2/randomAuth
CVE-2026-111633High· 8.6ZKEACMS through 4.4 Authentication Bypass via Hard-Coded JWT Signing Key
CVE-2026-111636High· 8.1OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret
CVE-2026-111642High· 8.8FastapiAdmin through 3.0 Hard-Coded JWT Secret Privilege Escalation
CVE-2026-111692Critical· 9.8DataBuff ai-apm-web through 0.1.10 Authentication Bypass via Hardcoded HMAC Secret
CVE-2026-111696Medium· 6.5data-platform-open through commit efeacd3 Hardcoded AES Key for Datasource Passwords