Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:databuff:ai-Apm-Web:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Authentication Bypass via Hardcoded HMAC Secret in DataBuff ai-apm-web

An unauthenticated authentication bypass vulnerability (CVE-2026-111692) in DataBuff ai-apm-web allows attackers to forge administrative session tokens using a hardcoded HMAC secret.

ai-apm-web authentication-bypass jwt web-application cve-2026-111692 credential-access api-security
1r 3t 1c