CVE-2026-111696Medium· 6.5▾ Sunlitdata-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServiceImpl, allowing authenticated attackers to decrypt stored datasource passwords. Attackers can obtain ciphertext passw…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
data-platform-open through commit efeacd3 uses a hardcoded, publicly known default AES key in AesPasswordEncAndDecServiceImpl, allowing authenticated attackers to decrypt stored datasource passwords. Attackers can obtain ciphertext passwords from the datasource detail API, for example via cross-workspace IDOR, and decrypt them offline to recover plaintext database credentials.
data-platform-open <= efeacd35e8450b7a084fa2134d292cd058cf605bRefer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-111695High· 7.1Shaiwz data-platform-open through commit efeacd3 IDOR in Datasource API
CVE-2026-111612High· 7.5netdisk-fast-download through 0.4.8 Credential Disclosure via /v2/randomAuth
CVE-2026-111633High· 8.6ZKEACMS through 4.4 Authentication Bypass via Hard-Coded JWT Signing Key
CVE-2026-111636High· 8.1OpenBMB StaffDeck through 0.5.6 Authentication Bypass via Hard-Coded Session Secret
CVE-2026-111642High· 8.8FastapiAdmin through 3.0 Hard-Coded JWT Secret Privilege Escalation
CVE-2026-111690Critical· 9.8Simple Admin Core through 1.8.7 Hard-Coded JWT Secret Authentication Bypass