Skip to content
OpenAdvisories

Vendor

wwwlike

2 known vulnerabilities.

Products

vlife 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-110612

    vlife through 2.0.1 Authentication Bypass via Hardcoded JWT Secret in TokenUtil

    vlife through 2.0.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs using the hardcoded HS256 signing key in TokenUtil. Attackers can sign a token with superUser=true and arbitrary groupIds claims to gain su…

    wwwlike vlife