Skip to content
Threat Feed
Subscribe

Product

Rote (<= 2.6.0)

1 brief RSS
high advisory

Rote: Privilege Escalation via JWT Secret Exposure (CVE-2026-126803)

Rote versions up to 2.6.0 contain a privilege escalation vulnerability that allows an authenticated administrator to forge JWT tokens by accessing the application's signing secret via the settings API.

Rote cve-2026-126803 privilege-escalation web-application-vulnerability
1r 2t 1c