Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.5%	CVE-2026-108860BotSharp · Use of Hard-coded Cryptographic Key Critical9.3EPSS 0.5%2026-10-11CVE Database V5CVE-2026-108860 BotSharp versions up to 5.2.0 contain a critical authentication bypass vulnerability due to a hard-coded cryptographic key. This flaw allows unauthenticated remote attackers to forge bearer tokens by using the fixed Jwt:Key found in the WebStarter appsettings.json file. Exploiting this, attackers can impersonate any user, including administrators, on API routes protected by authorization. EPSS 0.5%Vulnerability SciSharp #ghsa-w9f8-hvcg-hgcm	CVE Database V5	2026-10-11

Showing 1–1 of 1 result