Threats tagged 'ghsa-42fc-m93g-j65w'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-125370Kubero 3.0.0 through 3.1.1 contains an authentication bypass vulnerability that allows unauthenticated remote Critical9.32026-11-10GCVE DatabaseCVE-2026-125370 Kubero versions 3.0.0 through 3.1.1 have an authentication bypass vulnerability due to a hardcoded fallback signing secret used when the JWT_SECRET environment variable is unset. This flaw allows unauthenticated remote attackers to forge administrative JWT tokens with arbitrary claims, enabling full control over pipelines, applications, users, and API tokens. Report on CVE-2026-125370 Vulnerability CWE-321 #ghsa-42fc-m93g-j65w	GCVE Database	2026-11-10

Page 1 of 1