Threats tagged 'ghsa-4r6j-f6gv-fqcx'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-118690signalk-server · Signal K Server before 2.33.0 contains a missing authentication vulnerability that allows unauthenticated remote Critical9.32026-10-29GCVE DatabaseCVE-2026-118690 Signal K Server versions prior to 2.33.0 have a missing authentication vulnerability that permits unauthenticated remote attackers to download log archives via the /skServer/ziplogs endpoint. These archives contain the JWT secretKey, which attackers can extract to forge administrator tokens and create persistent admin accounts, resulting in full server control. Report on CVE-2026-118690 Vulnerability CWE-306 #ghsa-4r6j-f6gv-fqcx	GCVE Database	2026-10-29

Page 1 of 1