Skip to content
Threat Feed
Subscribe

Product

Simple Admin Core (<= 1.8.7)

1 brief RSS
critical advisory

Authentication Bypass in Simple Admin Core via Hard-coded Secret

Simple Admin Core versions up to 1.8.7 contain a critical authentication bypass vulnerability allowing attackers to forge administrative JWTs using a hard-coded secret.

Simple Admin Core authentication-bypass jwt cve-2026-111690 administrative-takeover
2t 1c