Skip to content
OpenAdvisories

Vendor

beenuar

5 known vulnerabilities.

Products

AiSOC 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-103055

    AiSOC 7.5.0 before 12.0.0 Authentication Bypass via Hard-coded JWT Secret

    AiSOC versions 7.5.0 before 12.0.0 use a hard-coded constant for JWT verification in the realtime WebSocket and SSE service when the AISOC_REALTIME_JWT_SECRET environment variable is not set. Unauthenticated attackers can forge subscription tickets with arbit…

    beenuar AiSOC
  • High 7.1
    CVE-2026-103054

    AiSOC 10.0.0 before 12.0.0 Unauthorized Tenant Access via MSSP

    AiSOC versions before 12.0.0 contain an authorization bypass vulnerability in the MSSP module that allows authenticated users to add arbitrary tenants to portfolios they own. Attackers can submit tenant UUIDs via the add_tenants_to_portfolio endpoint to claim…

    beenuar AiSOC