Skip to content
OpenAdvisories

Vendor

xianhc

1 known vulnerabilities.

Products

ape-volo-admin 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-120442 Scanner template

    ape-volo-admin before 3.6.1 Hardcoded JWT Signing Key Authentication Bypass

    ape-volo-admin before 3.6.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge administrator tokens using a hardcoded JWT signing key in appsettings.json. Attackers can sign tokens offline with the jti claim set to …

    xianhc ape-volo-admin