Skip to content
Threat Feed
Subscribe

Product

AJ-Report (<= 1.7.1)

1 brief RSS
critical advisory

AJ-Report: Remote code execution via hard-coded JWT secret (CVE-2026-120209)

AJ-Report versions 1.7.1 and earlier contain a hard-coded JWT secret, enabling token forgery and unauthenticated remote code execution via the testTransform endpoint.

AJ-Report remote-code-execution cve-2026-120209 web-application-vulnerability
2t 1c