Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:aj-Report:aj-Report:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

AJ-Report: Remote code execution via hard-coded JWT secret (CVE-2026-120209)

AJ-Report versions 1.7.1 and earlier contain a hard-coded JWT secret, enabling token forgery and unauthenticated remote code execution via the testTransform endpoint.

AJ-Report remote-code-execution cve-2026-120209 web-application-vulnerability
2t 1c