Description
Kener 3.0.0 before 4.1.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge session tokens by using the hardcoded DUMMY_SECRET fallback key. When KENER_SECRET_KEY is empty or unset, attackers knowing an administrator email can sign a kener-user cookie to access /manage/api with full administrative privileges or forge password-reset tokens.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| rajnandan1 | kener | 3.0.0 – < 4.1.10 | 4.1.10 |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Kener - Authentication Bypass http/cves/2026/CVE-2026-116747.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
References
- GitHub Issue #871 issue-tracking
- https://github.com/rajnandan1/kener product
- https://github.com/rajnandan1/kener/commit/ff636483544c926eab5b5e3e26b811c0f52bcaf8 patch
- kener v4.1.10 Release Notes release-notes
- https://github.com/rajnandan1/kener/blob/v4.1.9/src/lib/server/controllers/commonController.ts#L44-L55 technical-description
- VulnCheck Advisory: Kener 3.0.0 before 4.1.10 Authentication Bypass via Hardcoded Fallback JWT Secret third-party-advisory