Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.3%	CVE-2026-105392Django-Vue-Lyadmin · Use of Hard-coded Cryptographic Key Medium6.9EPSS 0.3%2026-10-05CVE Database V5CVE-2026-105392 CVE-2026-105392 is a vulnerability in Lybbn Django-Vue-Lyadmin up to version 3.2.12 where a hard-coded cryptographic key is used in the JWT signing component. This issue arises from the SECRET_KEY argument in backend/application/settings.py. Remote exploitation is possible, and the exploit has been publicly disclosed. The project maintainer advises developers to manually change the keys before deployment to mitigate the risk. EPSS 0.3%Vulnerability Lybbn	CVE Database V5	2026-10-05

Showing 1–1 of 1 result