Threats tagged 'ghsa-3rr9-8qpx-vhc4'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2026-115830In Secret Server versions earlier than 12.3.1, a user under certain conditions could submit an unsigned JWT and High8.72026-10-30GCVE DatabaseCVE-2026-115830 In Secret Server versions prior to 12.3.1, a vulnerability exists where a user under certain conditions could submit an unsigned JSON Web Token (JWT) and gain cloudadmin permissions. This flaw allows privilege escalation by bypassing proper token validation. Report on CVE-2026-115830 Vulnerability CWE-863 #ghsa-3rr9-8qpx-vhc4	GCVE Database	2026-10-30

Page 1 of 1